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Abstract. This paper introduces new notions of asymptotic proofs, PT(polynomial-time)- 
extensions, PTM(polynomial-time Turing machine)-t<;-consistency, etc. on formal theories of 
arithmetic including PA (Peano Arithmetic). An asymptotic proof is a set of infinitely many 
formal proofs, which is introduced to define and characterize a property, PTM-tj-consistency, 
of a formal theory. Informally speaking, PTM-oj-consistency is a polynomial-time bounded 
version (in asymptotic proofs) of w-consistency, and characterized in two manners: (1) (in the 
light of the extension of PTM to TM) the resource unbounded version of PTM-w-consistency 
is equivalent to ^-consistency, and (2) (in the light of asymptotic proofs by PTM) a PTM- 
u!-inconsistent theory includes an axiom that only a super-polynomial-time Turing machine 
can prove asymptotically over PA, under some assumptions. This paper shows that P^NP 
(more generally, any super-polynomial-time lower bound in PSPACE) is unprovable in a 
PTM-oj-consistent theory T, where T is a consistent PT-extension of PA (although this pa¬ 
per does not show that PyfNP is unprovable in PA, since PA has not been proven to be 
PTM-w-consistent). This result implies that to prove PyfNP by any technique requires a 
PTM-uJ-inconsistent theory, which should include an axiom that only a super-polynomial¬ 
time machine can prove asymptotically over PA (or implies a super-polynomial-time com¬ 
putational upper bound) under some assumptions. This result is a kind of generalization 
of the result of “Natural Proofs” by Razborov and Rudich HU, who showed that to prove 
“Pt^NP” by a class of techniques called “Natural Proofs” implies a super-polynomial-time 
(e.g., sub-exponential-time) algorithm that can break a typical cryptographic primitive, a 
pseudo-random generator. Our result also implies that any relativizable proof of Pt^NP re¬ 
quires the resource unbounded version of PTM-ui-inconsistent theory, u-inconsistent theory, 
which suggests another negative result by Baker, Gill and Solovay 0 that no relativizable 
proof can prove “Pt^NP” in PA, which is a oj-consistent theory. Therefore, our result gives a 
unified view to the existing two major negative results on proving PyfNP, Natural Proofs and 
relativizable proofs, through the two manners of characterization of PTM-w-consistency. We 
also show that the PTM-w-consistency of T cannot be proven in any PTM-oi-consistent the¬ 
ory S, where S' is a consistent PT-extension of T. That is, to prove the independence of P vs 
NP from T by proving the PTM-oj-consistency of T requires a PTM-ui-inconsistent theory, 
or implies a super-polynomial-time computational upper bound under some assumptions. 
This seems to be related to the results of Ben-David and Halevi |U ^-nd Kurz, O’Donnell 
and Royer m who showed that to prove the independence of P vs NP from PA using any 
currently known mathematical paradigm implies an extremely-close-to-polynomial-time (but 
still super-polynomial-time) algorithm that can solve NP-complete problems. Based on this 
result, we show that the security of any computational cryptographic scheme is unprovable in 


the setting where adversaries and provers are modeled as polynomial-time Turing machines 
and only a PTM-w-consistent theory is allowed to prove the security. 


Key Words: computational complexity, computational lower bound, P vs NP, natural proofs, 
relativizable proofs, cryptography, unprovability, undecidability, mathematical logic, proof theory, 
incompleteness theorem 
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1 Introduction 

1.1 Background 

It looks very mysterious that proving computational lower bounds is extremely difficult, although 
many people believe that there exist various natural intractable problems that have no efficient 
algorithms that can solve them. A classical technique, diagonalization, can separate some computa¬ 
tional classes like P ^ EXP, but it fails to separate computational classes between P and PSPACE, 
which covers almost all practically interesting computational problems. Actually, we have very few 
results on the lower bounds of computational natural problems between P and PSPACE. The best 
known result of computational lower bounds (in standard computation models such as Turing ma¬ 
chines and Boolean circuits) of a computational natural problem is about 5n in circuit complexity 
HU, where n is problem size. Therefore, surprisingly, it is still very hard for us to prove even the 
6n lower bound of TQBF, a PSPACE complete problem, which is considered to be much more 
intractable than NP complete problems. 

Considering this situation, it seems natural to think that there is some substantial reason why 
proving computational lower bounds is so difficult. The ultimate answer to this question would be to 
show that such computational lower bounds are impossible to prove, e.g., showing its independence 
from a formal proof system like Peano Arithmetic (a formal system for number theory) and ZFC 
(a formal system for set theory). 

This paper gives a new type of impossibility result, resource bounded impossibility, in the proof 
of computational lower bounds. 


1.2 Our Results 

Let theory T, on which we are assumed to try to prove Py^NP, be a consistent PT-extension of 
PA, throughout this paper (and hereafter in this section), where theory T is called PT-extension if 
there exists a polynomial-time algorithm that, given n S N, decides whether n is the Godel number 
of an axiom of T f Section 12.311 . 

This paper shows the following results. 


New Notions We introduce notions of asymptotic proofs, polynomial-time proofs, polynomial¬ 
time decisions, PT-extensions, PTM-cu-consistency etc. on formal theories of arithmetic including 
PA (Peano Arithmetic). 


— Asymptotic Proofs fSection | 2 . 811 : QiXi • ■ • Qk 7’(xi,... ,Xfc) has an asymptotic proof over 
T if 


Qicci G N • • • (5fea:fc G N T \-ip{xi,... ,Xk), 

where a boldfaced symbol (e.g, x) denotes a variable in theory T or numeral (e.g., x is the 
numeral of x G N), and Qi (i G {1,..., k}) denotes an unbounded quantifier. 
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Polynomial-time proofs ISection [2.711 : 


PTMe(a;) Pt ‘fiix) 

denotes that a PTM (polynomial-time Turing machine) coded by e S N, given x £ N and the 
Godel number of the expression of {^^(a) | a £ N} (constant in |x|), produces a proof (tree) of 
formula in theory T. 

— Let theory S' be a PT-extension of theory T. PTM-tc-consistency (Definition Theory S is 
PTM-w-consistent for Z\i-formula :/ 3 (e*,x) over theory T, if the following condition holds. 

Ve £ N 3e* £ N 3.^ £ N \/n>i Vc £ N PTMe(n) I/t 3x (n < x < n -f jnl*^) y)(e*,x) 
=> Ve £ N 3e* £ N 3^ £ N Vn>£ PTMe(n) I/s 3x > n y)(e*,x), 

where |n| denotes the numeral of |n| (see Section im . 

Theory T is PTM-w-consistent for (p(e*,x), if T is PTM-w-consistent for (/3(e*,x) over T. 


Formalization of P 7 ^:NP We formalize P/:NP as follows ('Definition 15.111 : 

P/:NP = Ve Vn 3x > n -iDecSAT(e, x), (1) 

where DecSAT(e, x) is a formula in PA which informally means that a PTM coded by e correctly 
decides the satisfiability or unsatisfiability of a 3CNF coded by x. 


Unprovability of P^NP in a PTM-w-consistent theory P/:NP cannot be proven in T that 
is PTM-w-consistent for any Af formula iTheorem Ifi7|l : 

T/ P ^ NP. 


Unprovability of PTM-w-consistency in a PTM-a;-consistent theory Let theory S be 
a consistent PT-extension of theory T, and S be PTM-w-consistent for any Al’-formula. Then, 
PTM-w-consistency of T for a A^-formula cannot be proven in S. fTheorem l73ll 

Thus, the independence of P vs NP from T by proving PTM-tc-consistency of T for a 
formula (i.e., through Theorem 16711 cannot be proven in S. 

In fact, the existence of PTM-w-consistent theory T for a Af-formula has not been proven, 
and the independence of P vs NP from PA has not been proven. 


Unprovability of the Security of Computational Cryptography The one-wayness of any 
function family is unprovable in the setting where an adversary and a prover are modeled to be 
polynomial-time Turing machines, and the security proof should be made in a PTM-w-consistent 
theory T for A^^ (Theo rem EJ. In other words, the security of any computational cryptographic 
scheme is unprovable under this setting. 

1.3 An Implication of Our Results 

To interpret our results, let assume the following hypotheses: 

— (Hypothesis 1) D1 ^ P^^NP, where 91 is the standard model of natural numbers (i.e., P 7 INP 
is true.) 
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— (Hypothesis 2) PA is PTM-w-consistent for A 2 . 

We then have the following consequence from our results. 

— P vs NP is independent from PA. 

This is because P^^NP is consistent with PA from Hypothesis 1, and -iPt^NP is consistent with 
PA, since PA 1/ P^^NP (from Theorem 1671 and Hypothesis 2). 

— Pdypothesis 2 cannot be proven in a PTM-uj-consistent theory T, where T is a consistent PT- 
extension of PA. 

That is, even if P vs NP is independent from PA, the independence (by proving Hypothesis 2) 
cannot be proven in a PTM-w-consistent theory T. 


1.4 Characterization of PTM-w-consistency 

Informally speaking, PTM-w-consistency is a polynomial-time hounded version (in asymptotic 
proofs) of w-consistency, and characterized in two manners: 

1. (Characterization in the light of the extension of PTM to TM) The resource unbounded version 
of PTM-w-consistency is equivalent to w-consistency. 

2. (Characterization in the light of asymptotic proofs by PTM) A PTM-u;-inconsistent theory 
includes an axiom that only a super-polynomial-time Turing machine can prove asymptotically 
over PA, under some assumptions. 

First, PTM-w-consistency can be extended to a resource unbounded TM (Turing machine) 
version of PTM-w-consistency, TM-w-consistency, which is equivalent to w-consistency (Remark |3 
of Dehnition Ellin Section rrrii . 

Second, PTM-w-consistent theory T is a formal theory, but is characterized by asymptotic 
proofs of PTM provers over T. A proof in a formal theory itself is a finite length proof and has 
no asymptotic property as well as no implication of prover’s computational capability. However, 
PTM-a;-consistency is defined through asymptotic proofs of PTM provers, and an axiom in a 
PTM-w-consistent theory may be characterized by asymptotic proofs of a PTM prover. 

For example, a PTM-io-inconsistent theory T, which is a consistent PT-extension of PA, should 
include an axiom outside PA that only a super-polynomial-time Turing machine can prove asymp¬ 
totically over PA, assuming that PA is PTM-w-consistent and deduction in T can be made asymp¬ 
totically by PTM (Remark El of Definition ED in Section mil . Let T be a theory in which an axiom, 
X, outside PA is added to PA. Although X cannot be proven in PA, it can be asymptotically 
proven over PA if it is true, since any true Z\i-sentence can be proven in PA. Therefore, a resource 
unbounded Turing machine can always produce an asymptotic proof of X over PA, but a resource 
bounded (e.g., polynomial-time) Turing machine may produce no asymptotic proof of X over PA. 
Hence, axiom X (and theory T) can be characterized by the computational complexity of a prover 
for producing an asymptotic proof of A. If T is PTM-io-inconsistent, the computational complex¬ 
ity of a prover for producing an asymptotic proof of X should be super-polynomial-time, under 
the above-mentioned assumption (Remark El of Definition I62II . Thus, PTM-w-consistency bridges 
a formal proof and prover’s (asymptotic) computational capability through asymptotic proofs. 

In accordance with the two manners of characterization of PTM-w-consistency, our main result 
that Py^NP cannot be proven in a PTM-w-consistent theory (Theorem EZJ suggests two avenues 
towards negative results: 
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— To prove P^NP requires a PTM-io- inconsistent theory, which should include an axiom that 
only a super-polynomial-time machine can prove asymptotically over PA (or implies a super¬ 
polynomial-time computational upper bound), under the assumption. This is a kind of gener¬ 
alization of the result of “Natural Proofs” by Razborov and Rudich ED See Section [T31 

— To prove P^^NP by a relativizable proof, i.e., to prove P"^ y^NP"^ with oracle A requires a 
PTM^-u!-inconsistent theory fProposition I68II . Therefore, if there exists a relativizable proof 
of Py^NP, which implies a proof of P'^ y^NP"^ for any oracle A, it will require an uj-inconsistent 
theory, since a PTM^^-uj-inconsistent theory with any oracle A is equivalent to a lo- inconsistent 
theory. This suggests the result that no relativizable proof can prove “Py^NP” in PA (or any w- 
consistent theory), which was shown by Baker, Gill and Solovay pQ. See the remark of Theorem 

EZI 

Therefore, our result, Theorem 1(771 ( and its generalization. Proposition IHHll. gives a unified view 
to the existing two major negative results on proving Py^NP, Natural Proofs and relativizable 
proofs, through the above-mentioned two manners of characterization of PTM-w-consistency. 
PTM-tu-consistency has also the following properties: 

— PTM-tu-consistency and ^-consistency do not imply each other. (Remark[21 of Definition I62II 

— Although the PTM-w-consistency of PA seems to be as natural as the w-consistency of PA, no 
PTM-oj-consistent theory T, which is a consistent PT-extension of PA, can prove the PTM-w- 
consistency of PA. (Theorem [721 and Remark 01 of Definition 1(1211 


1.5 Related Works 

Self-defeating results Our result is considered to be a kind of generalization of or a close relation 
to the previously known self-defeating results as follows: 

— Our result that PTM-tu-consistent theory cannot prove Py^NP (Theorem [23 implies a self- 
defeating property such that to prove a super-polynomial-time lower bound like Py^NP requires 
a PTM-w-mconsistent theory, which should include an axiom that only a super-polynomial-time 
machine can prove asymptotically over PA (or implies a super-polynomial-time computational 
upper bound) under the assumption described in the previous section. 

“Natural Proofs” by Razborov and Rudich ED showed that to prove a computational lower 
bound (e.g., a super-polynomial-time lower bound like Py^NP) by a class of techniques called 
“Natural Proofs” implies a comparable level of computational upper bound (e.g., a super¬ 
polynomial-time algorithm to break a typical cryptographic primitive, a pseudo-random gen¬ 
erator). In other words, to prove Py^NP by a “Natural Proof” requires an additional axiom X 
that implies a super-polynomial-time (e.g., sub-exponential-time) algorithm to break a pseudo¬ 
random generator and that can be proven asymptotically only by a super-polynomial-time 
machine, since no polynomial-time machine is considered to be able to asymptotically prove 
an upper bound property of a super-polynomial-time machine. Therefore, to prove Py^NP by 
a specific type of proof called “Natural Proof” requires a specific type of PTM-u!-inconsistent 
theory, which is PA -|- X. That is, the negative result regarding “Natural Proofs” is considered 
to be a special case of our result. Theorem E3 

— Our results imply another self-defeating property such that PTM-w-consistent theory S over 
T cannot prove the independence of P vs NP from T by proving PTM-tu-consistency of T for 
a Al’-formula (Theo rem C3. In other words, to prove the independence of P vs NP from T 
through Theorem [23 (i.e., to prove T \f Py^NP by proving PTM-w-consistency of T and to 
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prove T \f -iP^^NP by some way) requires Y’Tyi-tij-inconsistent theory over T, or implies a 
super-polynomial-time upper bound under the above-mentioned assumption. 

Ben-David and Halevi ^ and Kurz, O’Donnell and Royer ini showed that to prove the in¬ 
dependence of P vs NP from PA using any currently known mathematical paradigm implies 
a comparable level of computational upper bound, an extremely-close-to-polynomial time al¬ 
gorithm to solve NP-complete problems. In other words, to prove the independence of P vs 
NP from PA using any currently known mathematical paradigm requires an additional ax¬ 
iom Y that implies an extremely-close-to-polynomial time (but still super-polynomial-time) 
algorithm to solve NP-complete problems and that can be proven asymptotically only by a 
super-polynomial-time machine. Therefore, to prove the independence of P vs NP from PA by 
a specific type of proof using currently known mathematical paradigms requires a specific type 
of VTiyi-Lo-inconsistent theory, which is PA -|- Y. That is, the negative result by Ben-David 
et.al. is considered to be a special case of our result. Theorem 173 provided that Hypothesis 1 
in Section o is true and PA 1/ P 7 f:NP implies Hypothesis 2. 


Relativizable proofs Our result that PTM-w-consistent theory cannot prove Py^NP (Theorem 
suggests the result by Baker, Gill and Solovay who showed that there is no relativizable 
proof of “Py^NP”, and the result by Hartmanis and Hopcroft nan, who showed that for any 
reasonable theory T we can effectively construct a TM M such that relative to oracle L{M), 
“Pyf:NP” cannot be proven in T. (See the remark of Theorem 16711 

Our result might be related to the result by da Costa and Doria |S] , but the relationship between 
their result and ours is unclear for us. 


Mathematical logic approaches The results of this paper are constructed on the theory and 
techniques of mathematical logic, especially proof theory. Several mathematical logic approaches to 
solve the P vs NP problem have been investigated such as bounded arithmetic lasi, propositional 
proof length |dll8l2()| and descriptive complexity [5| . 

Bounded arithmetic characterizes an analogous notion of PH (polynomial hierarchy of compu¬ 
tational complexity), which is a hierarchy of weak arithmetic theories, so-called bounded arithmetic 
classes, wherein only bounded quantifiers are allowed. The target of the bounded arithmetic ap¬ 
proach is to separate one class from another in bounded arithmetic, which may imply a separation 
of one class from another in PH (i.e., typically Pyf:NP). 

The proof length of propositional logic can characterize the NP vs co-NP problem, since TAUT, 
the set of propositional tautologies, is co-NP complete. Therefore, the main target of this approach 
is to prove NPyf:co-NP by showing a super-polynomial length lower bound of a formal propositional 
proof of TAUT. In this approach, the lower bounds of the proof lengths and limitation of provability 
of some specific propositional proof systems (e.g., resolution, Frege system and extended Frege 
system) have been investigated. 

The descriptive complexity characterizes NP by a class of problems definable by existential 
second order formulas and P by a class of problems definable in first order logic with an operator. 
The target of this approach is to separate P and NP using these logical characterizations. 

This paper characterizes the concepts of P and Py^NP etc., by formulas in Peano Arithmetic 
(PA). A novel viewpoint of our approach is to introduce the concept of an asymptotic proof 
produced by a polynomial-time Turing machine as a prover, to characterize a property of a formal 
theory, PTM-tu-consistency, by using this concept, and to show that no PTM-tu-consistent theory 
can prove a super-polynomial-time computational lower bound such as P^NP. 







To the best of our knowledge, no existing approach has studied computational lower bounds 
from such a viewpoint. ^ 


Proof systems In order to define the PTM-w-consistency, this paper introduces a new concept of 
proof systems, asymptotic proofs and polynomial-time proofs where the computational complexity 
of (prover’s) proving a set of statements asymptotically is bounded by polynomial-time. In the 
conventional proof theory, the properties and capability of a proof system (e.g., consistency, com¬ 
pleteness, incompleteness etc.) are of prime interest, but the required properties and capability of 
the prover are not considered (i.e., no explicit restriction nor condition is placed on the prover). 

Note that the bounded arithmetic approach seems to follow this conventional paradigm and 
bounds the capability of the proof system (axioms and rule of inferences) to meet the capability 
of resource bounded computational classes. That is, the prover is still thought to exceed the scope 
of the approach. 

In this paper, the computational complexity of a prover is investigated through the concept of 
an asymptotic proof system. An asymptotic proof is a set of an infinite number of formal proofs, 
and a resource bounded (e.g., polynomial-time bounded or exponential-time bounded etc.) prover 
asymptotically produces an asymptotic proof of a set of infinitely many formal statements. 

This paper then introduces a new concept, PTM-w-consistency, which is a property of a con¬ 
ventional proof system, but is defined and characterized by the concept of asymptotic proofs with a 
polynomial-time bounded prover. PTM-w-consistency plays a key role in our results (for example, 
see Section n~^ . 


Undecidability Although the computational complexity theory is a resource bounded version 
of the recursion theory, to the best of our knowledge, little research has been made on resource 
bounded undecidability of formal statements. 

This paper introduces a resource bounded (asymptotic) decision system, which corresponds to a 
resource bounded (asymptotic) proof system, and presents the incompleteness theorems (Sections 
01 and 13). Using the incompleteness theorem of resource bounded (asymptotic) decision systems 
yields the resource bounded unprovability of P^^NP (Section |7)). 


1.6 Key Ideas of Our Results 

In order to obtain our main result (Theorem 03 Pt^NP cannot be proven in a PTM-w-consistent 
theory), this paper introduces the concept of polynomial-time decision systems (Section 0)). In a 
proof system, we usually consider only one side, a proof of a true statement. In a decision system, 
however, we have to consider two sides, CA (correctly accept: accept of a true statement) and CR 
(correctly reject: reject of a false statement). CD (correctly decide) means CA or CR. 

The key idea to prove Theorem 03 is a polynomial-time decision version of incompleteness 
theorems. Informally speaking, we introduce a special sentence, p^(x), (an analogue of the so-called 
Godel sentence) like “this statement, p^(x), cannot be correctly accepted by a polynomial-time 
Turing machine (PTM) encoded by e.” (Hereafter, “a PTM encoded by e” is called “PTM e”) 
If p^(x) can be correctly accepted by PTM e, it contradicts the definition of /o^(x). It follows 

^ A prover is modeled as a Turing machine in the interactive proof system theory, and the computational 
complexity of a prover has been investigated nan]. However, no proof system with a polynomial-time 
Turing machine prover that produces an asymptotic proof of a computational lower bound has been 
studied. 
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that pf{x) cannot be correctly accepted by PTM e. We also define another sentence, pf(x), 
which cannot be correctly rejected by PTM e. (First incompleteness theorems of polynomial¬ 
time decisions: Theorems OHl and QUl • Based on these theorems, we show that, for any formula set 
{^(x) I a: £ N} (e.g., formula set on the satisfiability of 3CNF), for any PTM e, there exists another 
PTM e* such that PTM e, on input a: £ N, cannot asymptotically prove that PTM e* cannot 
correctly decide (Second incompleteness theorem of polynomial-time decisions: Theorem l45ll . 
By using Theorem 1451 we show that no PTM can prove P^^NP asymptotically iLemma 15411 . 

This paper then introduces the PTM-lo- consistency of T, which is a PTM version of ^-consistency 
and plays a key role in our result (for its semantics and rationale, see Section If .41 and the remarks 
of Definition I52II . Combining Lemma ICT and PTM-w-consistency of T, we can show that P^^NP 
cannot be proven in PTM-w-consistent theory T (Theorem 15711 . 

This paper also introduces the notion of polynomial-time proof systems^ and obtains a polynomial¬ 
time proof version of incompleteness theorems (Sections|21and|2l . Informally speaking, we introduce 
a special sentence, Pe,T, like “this statement, Pe,T, cannot be proven by a polynomial-time Turing 
machine (PTM) e in theory T.” If p^^x can be proven by PTM e in T, it contradicts the definition of 
Pe,T, assuming that T is consistent. It follows that p^pr cannot be proven by PTM e in T, although 
another PTM can prove it (First incompleteness theorem of polynomial-time proofs: Theorem l2()ll . 
Based on this theorem, we show that, for any formula set {'!/'(x) | a: £ N} for any PTM e, there 
exists another PTM e* such that PTM e, on input a: £ N, cannot asymptotically prove that PTM 
e* cannot prove ^/'(x) (Second incompleteness theorem of polynomial-time proofs: Theorem 12111 . 

By using Theorem and PTM-w-consistency, we show that the PTM-w-consistency of T 
cannot be proven in a PTM-w-consistent theory S, where S' is a consistent PT-extension of T 
(Theorem I73II . (In fact, we have not shown the existence of a consistent and PTM-w-consistent 
PT-extension of PA; therefore, we have not shown the unprovability of P 7 (:NP in PA.) 

Finally, based on Theorem l57l the unprovability of the security of the computational cryptogra¬ 
phy is obtained (Theorems 1811 and l82ll in a setting that provers as well as adversaries are modeled 
as PTMs and only PTM-w-consistent theory is allowed to prove the security. 

2 Polynomial-Time Proofs 

This paper follows the standard notions and definitions of computational complexity theory (e.g., 
definitions of P and NP) and mathematical logic (e.g., definition of a formal proof in Peano Arith¬ 
metic). See m for such standard notions and definitions of computational complexity theory and 
see for the standard notions and definitions of mathematical logic. 

The central interest of this paper is the difficulty of proving the lower bound of computational 
problems by resource bounded Turing machines. For this purpose, first, we need to formalize the 
notion of a formal proof produced by a resource bounded Turing machine. This section introduces 
our formalization of a proof produced by a polynomial-time Turing machine (polynomial-time 
proof: PTP) in a theory that is an extension of Peano Arithmetic (hereafter Peano Arithmetic is 
abbreviated to PA). 

Remark: 

This paper is based on the standard notion of formal proofs in first order logic mm- There are, 
however, many possible ways of formalizing such formal proofs, especially with regard to the style 
of formalizing the deduction system; alternatives to the selection of logical axioms and rules of 
inference. There are two typical styles: one is the Hilbert-style, which has several logical axioms 
and a few rules of inference, and the other is the Gentzen-style, which has just one logical axiom 
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and several rules of inference. However, the results in this paper are not affected by the way of 
formalizing the deduction system, and almost all descriptions in this paper are independent of the 
style of formal deduction system adopted. When we need to make an explicit description on a 
specific deduction system, this paper adopts the Hilbert style, which has two rules of inference; 
Modus Ponens and Generalization rules. 


2.1 Notations 

Let N be the set of natural numbers including 0. 

When w is a bit string, |z(;| denotes the bit length of w. 

When w S N, [w] denotes the binary representation of w, i.e., bit string Wk-iWk -2 ■ ■ ■ wg with 
w = Wk-i2^~^+Wk-22^~^ + ' ■ ‘Wq, k = [log 2 wJ+1 (w > 0), and Wi € {0,1} for i = 0,1, 2,..., A:—1. 
When w = 0, [?c],Le., [0], denotes the binary representation, 0. When w £ N, |w| denotes the bit 
length of [w]. 

PA has a constant symbol, 0, intended to denote the number 0, and has three function symbols, 
S, +, •, where S is a one-place function symbol intended to denote the successor function 5 : N —> N, 
i.e., the function for which S(n) = n + 1, and symbols -I- and • are two-place function symbols 
of addition and multiplication, respectively. PA also has symbols of predicate logic such as logical 
symbols (-i. A, V, —V, 3, etc.), relation symbols (=, <, etc.), and variable symbols (x,y, z, etc.). 

The numerals of PA are denoted by boldfaced number symbols such as 1, 2, 3, ..., for SO, 
SSO, SSSO, .... Boldfaced alphabet symbols such as x, y, xi, x^, etc., are also used for variables 
in theory T. 

n times 

Throughout this paper, we assume that the numeral, SS • • • • SO, of natural number n is ex¬ 
pressed by the following binary form in a theory including PA: 

k — 1 times 

/-^ 

no 3- rii ■ SSO -t- • • • -I- • SSO • SSO • • • • SSO, 

where n = ng + ni ■ 2 + ■ ■ ■ rik-i ■ 2^~^, rii £ {0,1}, n, = 0 if = 0 and = 1(= SO) if = 1 
(i = 0,1,..., A: — 1). Here we denote this expression of the numeral of natural number n by S"0 or 
just n. Similarly, if alphabet a denotes a natural number, a denotes S“0. 

We will now introduce two additional function symbols in PA. (A function symbol, /, of a 
primitive recursive function is considered to be implicitly included in PA, i.e., / can be identi¬ 
fied with a formula, py, in PA, since / is representable by a Aiformula, py, in PA and PA h 
Vxi • • • Vxfc3!y p/(xi,... ,x/c,y). See Subsection l2.4l ') 

Here it is worth noting that these function symbols, which correspond to primitive recursive 
functions, are introduced for improving the readability of formulas, not for increasing proving 
ability. Therefore, in this paper we assume that no Godel number for a function symbol of a 
primitive recursive function (except S, -|- and • ) is provided (see the next section for Godel 
numbers). The Godel number of a formula including such a function symbol is calculated on the 
formula without using the function symbol, i.e., the formula in which only function symbols in 
PA are employed. This assumption is applied for any theory T which is a PT-extension of PA 
throughout this paper. Hence the Godel number of a formula in T is uniquely defined even if some 
function symbols of primitive recursive functions are employed in the formula. 

If X, y and z are numerals in PA, x—y denotes a two-place function: (x, y) i—> z, such that 
z = X = S“0, y = S?^0, a: £ N and p £ N. 
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If X, y and z are numerals in PA, denotes a two-place function: (x, y) i—> z, such that 
z = X = S^^O, y = SJ'O, a: e N and y G N. 

By using these function symbols (notations), the notation of a numeral, n, is defined by 


no -t- ni • 2^ -b • ■ • -t- Wk-i '2*^ 


When n is a numeral, |n| denotes the numeral of |n|. The function symbol, | ■ |, is justified by 
the first claim in the proof of Theorem El 
Some other notations are: 


— Ip (fi denotes 


(ip ^ <f) A {tp ^ (fi), 


— 3!y ip{y) denotes 

3y‘b>(y) A VyiVy 2 (:^(yi) Ay5(y2) ^ yi = y 2 ), 

which means y uniquely exists to satisfy </a(y). 

— Vx > n (fi(x) denotes 

Vx (x > n ^ ‘P(^))- 


- 3x > n yj(x) denotes 


3x (x > n A </3(x)). 


— Some basic notations in proof theory [2]: 


which informally denotes “the truth of formula ip is provable in theory T”. 

PrT(M), 

which denotes a formula in T, which informally means “there exists a proof for the truth of 
formula ip in theory T”. Here (ip] denotes S^'^O. 

— T is inconsistent if there exists a formula p in T such that T \- p and T I- ip^ which is also 

denoted by T h T. T is consistent if there exists no such formula p in T. Here, T = -iVx(x = 
x). 

— T is u!-inconsistent if there exists a formula p('x.) in T such that 

T h 3x v?(x), and 
VoGN TA^p{a). 

T is Lo-consistent if there exists no such formula :^(x) in T. (If T is w-consistent, T is also 
consistent. The reverse is not always true.) 

— 91 is the standard model of natural numbers. When is a formula in PA, 

<n^p 


denotes that p is true in 91. 
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2.2 Godel numbers 

There are many ways of defining the Godel numbers, and the way introduced in this section differs 
from those described in Godel’s original paper and textbooks (e.g., (3), since in this paper we 
require a polynomial time algorithm to make unique encoding and decoding. We basically follow 
the approach introduced by 13 . (We can also adopt a coding method employed in actual current 
computer systems.) 

Let be a Godel number of p. First, we define Godel numbers of basic symbols in L as 
follows: (for example) #V is 0, #( is 1, #0 is 2, #) is 3, #S is 4, #-1 is 5, # < is 6 , # —> is 7, #+ 
is 8 , # = is 9, #• is 10, #, is 11, #ai is 20, #Xi is 22, ^a .2 is 24, #X 2 is 26, etc. 

We then use the following method to obtain the Godel number of a sequence of natural numbers, 
ai,a2,...,afe [S]: 

1. Represent Ui by the binary representation with the least significant bit on the right, as is 
traditional. Then, ai,a 2 ,...,afe can be represented by the sequence of three symbols ‘O’, ‘1’ 
and 

2. Reverse the order of the sequence of ‘O’, ‘1’ and and replace ‘0’ by ‘10’, ‘1’ by ‘11’ and ‘,’ 
by ‘01’. We then obtain a sequence of ‘0’ and ‘1’. 

3. The natural number whose binary representation is this sequence is the Godel number of the 
number sequence, oi, 02 ,..., Ofc. It is denoted by (oi, 02 ,..., a^). 

For example, (3,4, 5) is a natural number, whose binary representation is 11101101101011011111, 
because 3,4, 5 is binary-represented along with commas by 11,100,101 and is encoded to a binary 
sequence, 11101101101011011111 . 

When (fi is an expression in language L, it is a sequence of symbols, sqSi • ■ ■ Sk, of L. We then 
define the Godel number, of p as follows: 

■ ■ ■ > 

For example, when p is ^(Vxi(xi < SO)), 

i^p = (#-, #(, #V, #xi, #(, #xi, # <, #S, #0, #), #)) 

= (5,1,0,13,1,13,6,4,2,3,3). 

Remember here that numeral n (= S”0) denotes the binary form, i.e., 

fc — 1 times 

/-*-s 

no -f ni • SSO -t- • • • -f vvk-i ■ SSO • SSO • • • • SSO . 

Hence, |#n| (i.e., |#S"0|) is of the order of log 2 n. 

Here also remember that we provide no Godel numbers of additionally introduced function 
symbols of primitive recursive functions such as 2". That is, the Godel number of a formula 
including such a function symbol is calculated on the formula with only function symbols in PA. 
For example, 

n times 

#2" = #sso.sso....ssd = (#S, #S, #0, #0). 

Therefore, 1#2"| = 0{n)? 

^ If we have the Godel number of the function symbol EXP such as EXP(x, y) = x^, then |#2"1 = 
|#EXP(2, n)| = |#EXP(SS0, no -b m • SSO -f ■ • • -b n^.i • SSO ■ ■ ■ SS0)| = K#EXP, #(, #S,..., #0)| 
= 0 (log 2 n), since k = 0 (log 2 n). 
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We then introduce a concatenation operation || of two Godel numbers, and where 
= (#so,#si,.. .,#Sfc) and #0> = (#to, #ii, ■ • ■, #0)- #</5||#0 is defined by 

(#so, #si, ■ ■ •, #ti,..., #0). 

2.3 Polynomial-Time Extension of PA 

Let formula Axioms(n) be true if and only if n is the Godel number of an axiom of T. If the 
truth of Axiomj’(n) can be correctly decided by a polynomial-time algorithm in |nl, on input 
n, we say that T is polynomial-time axiomizable. If T is an extension of Tg and polynomial-time 
axiomizable, then we say that T is a polynomial-time (PT) extension of Tq- 

Using the notations introduced in Section o a polynomial-time axiomizable theory, T, is 
defined as follows: Let AX = {AxiomT(n) | n S N} and '&izeAx{n) = |n|- There exists e G N such 
that for all n G N 


PTM^‘^(n)> AxiomT(n) V PTM^'^ (n) [> ^AxiomT(n). 

2.4 Representability Theorem in Mathematical Logic 

This section introduces the representability theorem in the conventional mathematical logic mm- 
This theorem plays an important role in many situations as well as in constructing the polynomial¬ 
time version of the representability theorem (Theorem EJ, which is essential to formalize the 
execution of PTM in PA. 

In this paper, we use the standard notions and notations of mathematical logic, such as T \- ip 
(informally, a sentence p is provable in theory T), with no introduction (see mm)- 

Definition 1. 1. Let R be a k-ary relation on N; i.e., R C A formula ... ,Xk) (in 

which only Xi,... ,Xk occur free) will be said to represent a relation R in theory T 
if and only if for every oi,..., m 

(oi,... ,afc) G i? ^ T h pfl(ai,... ,afe), 

(oi,...,Cfc) ^ i? T\ ... ,ak). 

A relation R is said to be representable in T if and only if there exists some formula pfi that 
represents R in T. 

2. Let f be a k-place function on the natural numbers. A formula pf{xi,... ,Xk,y) (in which only 
xi,... ,Xk,y occur free) will be said to functionally represent f in theory T if and only if for 
every ai,... ,ak m 

T h \/y{pf {ai ,..., afe, y) ^ y = 

A function f is said to be functionally representable in T if and only if there exists some 
formula p that functionally represents f in T. 

Proposition 2. (Representability Theorem) For any primitive recursive relation on R, and 
any primitive recursive function onN^, f, there exist formulas, /5i{(xi,... ,Xfe) and p/(xi,... ,Xfe,y), 
such that: 

— ph(x.i, ... ,Xfc) represents R, and p/(xi,... ,Xfc,y) functionally represents f in PA. 
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Pfl(xi,... ,Xfc) and Pf{xi, ... ,Xfc,y) are Ai in PA. 


PA t- Vxi • ■ • Vxfe3!y p/(xi,... ,Xfe,y). 

Proposition 3. Let only Xi,... ,Xfe,y occur free in formula (^(xi,... ,Xfc,y). 

IfTL Vxi • ■ • Vxfc3!y i^(xi,... ,Xfc,y), then theory T' 

= T U {Vxi • ■ • VxfcVy ((/ 7 (xi,...,xfe,y) ^/(xi---Xfe) = y)} 

is a conservative extension ofT. 

From Proposition 0 we can identify theory T', which has function symbol /, with theory 
T, in the light of provability and representability. In other words, we can consider that function 
symbol / ( and the corresponding axiom, Vxi • • • Vx^Vy ( (/^(xi,...,x^, y) ^ /(xi • • • x^) = y) ) 
is implicitly included in theory T. Therefore, from Propositions 13 and |3 we can consider that a 
function symbol of any primitive recursive function is implicitly included in PA. Later in this paper, 
we will introduce several primitive recursive function symbols in theory T which is a PT-extension 
of PA. 

Proposition 4. Let g be an n-place function, let he m-place functions, and let f be 

defined by 

V = fixi,. . . ,Xm) = g{hi{xi, . . . ,Xm), ■ ■ • , (a;i, . . ■,Xm))- 

Let formulas, ip and 9i,..., 9^, functionally represent g and hi,, h^, and formula pj be defined 
as follows: 

p/((xi,...,x™,v) = 

3yi...3yfc ( 0 i(xi , . . . , X 777 ,, yi) A ... A 6 >fc(xi , . . . , X 777 ,, yfe) Aip{yi,...,yk,v) ). 

Then, pf functionally represents f. 

2.5 Turing Machines 

A Turing machine (TM) is represented by {Q, S, L, 5, go, daccept, dreject), where Q is a set of states, 
E = {0,1} is the input alphabet, L is the tape alphabet with blank symbol U and {0,1}, S : 
Q X r —>■ Q X Lx {L, R} is transition function, go is the start state, daccept is the accept state, and 
dreject is the reject state m 

The computation process of a Turing machine can be represented by the sequence of configura¬ 
tions, Co, Cl,..., Cfe. Each configuration Ci consists of three items, the current state, gi S Q, the 
current tape contents, and the current tape head location. It is convenient to represent a configura¬ 
tion by triple {u, g, v), where the current state is g, the current tape contents is uv and the current 
head location is the leftmost bit of v, where uv denotes the concatenation of bit strings u and v. 
When a configuration Ci is {ua, g, bv) (a, b G {0,1}), transition function <5 yields configuration C^+i 
such that 

Ci+i = {u, d', acv) if 5{d, b) = (g', c, L), 

Ci+i = (uac, g', v) if 6{g, b) = (g', c, R). 

We can also define a Turing machine whose output is not just accept/reject, but a finite sequence 
of E. Here, dhait is used in place of daccept and dreject- The output value is the tape contents in 
state dhait- 
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Let Cm be a natural number whose binary representation, [cm], is a part of the input to a 
universal Turing machine U, and denotes the description of Turing machine M. In other words, 
U can simulate M by reading [bm]- Let w be a natural number and [w] be the input to M. We 
then use \J{eM,w) (= M(w)) to denote a natural number whose binary representation, [U(eM 5 w)], 
is the output of U with input [cm] and [w]. So, we abuse notation U for a function over natural 
numbers, which is defined by universal Turing machine U. 

2.6 Polynomial-Time Turing Machines 

Let M be a polynomial-time Turing machine (PTM). W.l.o.g., we assume [cm] consists of a pair 
of bit strings, (t, [c]): t is a description of a Turing machine that allows a universal Turing machine 
to simulate M, and c is a constant natural number such that M’s running time is bounded by 
Size(u;)'^. Here w S N, [w] {W: set of input strings to M) is an input to M. 

Size(-) is a function. 

Size : N —> N, Size : w Size(w), 

which determines the size (bit length) of input [ic] £ W such that, for positive constants Ci and C 2 , 
for all [ic] G W, < Size(r(;)| < and Size(-) is a polynomial-time (in \w\) computable 

function. The size function, Size(-), is uniquely determined by each class of problems such as 
3SAT and Hamiltonean circuit. If Size(-) is not explicitly defined, Size(a) = |a|. For example, if 
the underlying class of problems is 3SAT, [w] is a binary-code description of a 3CNF formula, 
and Size(w) is the number of variables of the 3CNF formula. Then, we may use Size 3 SAT(w) to 
explicitly represent this function for a specific problem, 3SAT. If [w] is not a (syntactically) valid 
value that describes a 3CNF formula, the function value of Size 3 SAT(ic) is defined to be |ri;|, and a 
PTM specific to 3SAT, which reads such an invalid input value, immediately moves to the reject 
state (or outputs “invalid input” etc). (In Section IHl function Size^Ar is more simply defined by 
Sizes AT (w) = |t(;| for all re G N.) 

It is easy to convert any Turing machine described by t into a Turing machine described by 
(t, [c]), by just adding a running step number counter (with a specific tape for counting). Note that 
the counter does not count the running steps for counting. M accepts [w] if it accepts [rc] within 
Sizevi/(ic)° steps, and it rejects [rc] otherwise. Given {t, [c]), universal Turing machine U simulates 
PTM M by description t and counts the running step number of the simulated machine up to 
Sizew(rc)° and halts the machine when the number exceeds Sizew(ic)°- Such a special universal 
Turing machine for PTMs, which only accepts the form of {t, [c]) as input [bm], is denoted by Uptm 
in this paper. We assume a single (fixed) Uptm for PTMs. Then, natural number bm implies a 
unique PTM M. It is clear that any PTM M can be simulated by Uptm with input [bm] with 
form of (t, [c]). That is, M(w) is exactly simulated by Uptm(bm, w)- 

Here, w.l.o.g., we assume Uptm can syntactically check whether bit string t is a syntactically 
correct description of a Turing machine for Uptm- Such syntactic rules of describing a Turing 
machine for Uptm can be clearly specified. Uptm can effectively check whether t is a syntactically 
correct description or not, in a manner similar to that used by computer language compilers. Uptm 
can also effectively check whether the format of [bm] = (t, [c]) is syntactically valid or not. If Uptm 
recognizes [bm] to be syntactically incorrect (e.g., the part of [c] is not syntactically recognized), 
Uptm outputs a special string denoting “syntactically invalid code”. Here it is essential that Uptm 
be able to correctly simulate a PTM if (t, [c]) is valid, and such a valid string [bm], which is 
syntactically recognized valid by Uptmi always exists for any PTM M. Note: it is not essential 
how well Uptm can find an invalid string. If Uptm incorrectly recognizes an invalid string as a 
valid one, and executes the input, then Uptm may run abnormally (e.g., runs in an infinite loop or 
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immediately halts). If it immediately halts (i.e., in a halting state), it is the output of the execution. 

If it runs in an infinite loop, the step counter of Uptm executes independently and halts when the 
number of steps exceeds Sizevp(w)°. 

We then use Uptm (cm, w) to denote a natural number whose binary representation, [Uptm (cm, w)], 
is the output of Uptm with input [bm] and [w]. Therefore, similarly to U, we also abuse the nota¬ 
tion of Uptm for a function over natural numbers: (cm, ic) Uptm (cm, w). Clearly, it is a totally 
recursive (for input {eM,w)) and polynomial-time (in Sizen/(r(;)) function. 

When the input to PTM M is a tuple of natural numbers, {wi,W 2 ,... ,Wk) £ W, we denote 
Uptm (cm, {wi,W 2 , ■ ■ ■ ,Wk)) as its output natural number. Here, we can consider Uptm as a totally 
recursive function over [k + l)-tuple natural numbers (cm, wi,W 2 , ■ ■ ■, Wk) and a polynomial-time 
(in Sizew(wi, W 2 ) • ■ ■ > w^)) function. 

We then introduce a classical result on the relationship between the time complexity of a Turing 
machine and Boolean circuit complexity (Theorem 9.25 in |2dp. 

Proposition 5. Let t : N —> N 6e a function, where t{n) > n, and X = where 

Xn = {Xn I n £ N} is a set of problems Xn with Sizex„(a:n) = ri. If all problems in can 
be computed/decided by a Turing machine within time t(n), then they can be computed/decided by 
a Boolean circuit with size 0(t^(n)). 

This proposition implies that the functionality of a polynomial-time Turing machine can be 
realized by a polynomial size (uniform) Boolean circuit. This property is used in the proof of 
Theorem CH 


2.7 Polynomial-Time Proofs 

A formal proof, tt, of a formula, ip, is expressed in tree form, called a proof tree, as follows: A 
proof tree consists of nodes and directed branches. When node a is connected with node b through 
a branch directed from b to a (i.e., 6 —> a), a is called a child of b and b is called a parent of 
a: we denote the relation as a[6]. If b and c are parents of a, the relation is denoted by a[b,c]. If 
a\b[c, [d, ],]], then a is called a descendent of c and d, and c and d are called ancestors of a. A node 
with no child node is called a root, and a node with no parent node is called a leaf. A proof tree has 
only one root node. (Thus, the image of a proof tree is similar to an actual tree: the root is located 
at the bottom of a tree and the leaves are at upper on branches.) Node x has form < xo,xi >, 
where xq is a formula and xi is a rule of inference of the predicate logic in theory T. If a, b, c are 
nodes of a proof tree of tt = a[b, c], and a =< uq, ai >, b =< bo, bi > and c =< cq, ci >, then tt 
means that formula oq is deduced from formulas bo and cq through a rule of inference, oi. If no rule 
of inference is used for the deduction, the part of oi is empty. If node a =< ap, oi > is a leaf, then 
Op is an axiom of the underlying theory T of the proof tree, and oi is empty. If node r =< rp, ri > 
is the root of a proof tree of formula <p, rp = <p. 

If theory T is a polynomial-time extension of PA, the Godel numbers of all axioms and rules 
of inference in T are polynomial-time (in the size of axioms) decidable. Hence it is clear that 
the validity of proof tree tt can be verified within polynomial-time in the size of axioms and the 
number of nodes of tt. At the end of this subsection, we will show a more precise description of the 
polynomial-time algorithm to verify the validity of proof tree tt. 

Let <P = {:/5(a) I a £ N} be a set of an infinite number of formulas in T. The size function, 
Size 4 i(-), over natural numbers {a £ N}, is uniquely defined in each L>. If Size^)(-) is not explicitly 
defined, Size^.(a) = |a|. Let be the Godel number of the (finite-size) expression of the symbol 
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sequence, {</j(a) | a G N} (or the Godel number of any description of <!>). Note that the size of 
is finite i.e., a constant in |a|. 

If UpTM(e, (p, a)) = #7r and tt is a valid proof tree of i^(a) G ^ in theory T, we denote 

PTMe(a) hr ¥^(a). 

Here p denotes a natural number (e.g., 0), which indicates that the output target of UpTM(e, •) is 
a proof of the formula’s truth. 

If a natural number (e.g., 1), d, is input to UpTM(e, •) in place of p, it indicates that the output 
target of UpTM(e, •) is a decision (accept or reject) of the formula’s truth. That is, “UpTM(e, (d, #??, a)) 
accepts” implies that UpTM(e, •)> given (d, a), decides that formula p(a) is true. (See Section 

O) 

In other words, 

PTMe(a) hr p(a) 

UpTM(e, (p, a)) = #7r A Uptm(wt, (#p(a), #7r)) accepts, 

where Uptm(wt, (#‘a(^)) #7r))accepts, if and only if PTM Uptm(^'t, •) accepts its input (#<p(a), #7r) 
as TT is a valid proof tree of <p(a) G ^ in theory T. Here, |#7r| is clearly polynomially (in Size,ji(a)) 
bounded, since #7r is the output of UpTM(e, (p, a)). In addition, we use the notation 

PTMe(a) [/t p(a) 

if and only if ^( PTMe(a) hr p(a) )• 

We now describe PTM Uptm(^'t, •) more precisely. 

1. (Input to UpTM('yT, ■)) (#‘/^(a), #71"), where p(a) is a formula and tt is a proof tree. 

2. (^ip(a),^7r) is interpreted as the Godel numbers of <p(a) and tt in the manner described in 
Subsection E21 

3. Check the validity of the syntactic form of tt. 

4. Search all nodes of tt, and, for each node, decide whether the node is leaf, root or other (say 
“middle nodes”). 

5. Repeat the following procedure for all leaf nodes, (i = I,... ,£): 

Pick up and check whether is an axiom of theory T, where =< Oq \ > and 

is empty string. 

6. Repeat the following procedure for all “middle nodes” and the root note, 6^*^ (i = 1,... ,to): 

Pick up 6^*^ along with its parent nodes (say (j = 1,... ,Pi)), and check whether ^ is 
deduced from Cq'^'^ (j = I,...,pi), by using a rule of inference 6^*^ (or by using no rule of 
inference when 6^*^ is empty), where 6^*^ =< >, and =< >. 

7. Let r =< ro,ri > be the root node. Check whether tq = <p(a). 

8. If all of the above-mentioned checks are passed correctly, the machine accepts the input. Oth¬ 
erwise rejects. 


A series of formal proofs produced by a PTM is called a series of “polynomial-time proofs”. 
Here, each polynomial-time proof is a formal proof, tt, of each formula p{b.) in theory T (i.e., “a 
polynomial-time proof” does not mean a set of formal proofs. We will introduce a notion of a set 
of formal proofs in the next section). 

In addition, we introduce the following notation: 


TMe(a) hr ‘^(a) 

U(e, (p, #^,a)) = #7r A UpTM(?7r, (#p(a), #7r)) accepts. 
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2.8 Asymptotic Proofs 

This section introduces a notion called “asymptotic proof”. 

Definition 6. Let T be a theory, <P = {y)(ai,..., afc) | (ai,...,afc) G N^} be a set of (infinite 
number of) formulas, <p(ai,..., a^) in T, and 


Qixi G N T h y)(xi,... ,Xfe), 

where Qi,..., Qk are unbounded quantifiers (including partially bounded ones like 3x > n ). 

Then, a set of an infinite number of formal proofs, U, in T, is called an “asymptotic proof” of 
Qixi ■■■QkXk (p(Ki,...,jik), overT if 

QiaiGN •••QfcafcGN 

( 7r(ai,... ,afc) e 11 A Uptm(i^t, ,a;,), #7r(ai,...,afc)))occepts ). 

The descriptive size of an asymptotic proof, 77, can be infinite. Therefore, such an asymptotic 
proof, 77, cannot be formulated as a conventional formal proof in T, which should be finite-length. 

The following lemma demonstrates the difference in provability between formal proofs and 
asymptotic proofs. 

Lemma 7. Let T be a primitive recursive extension of PA and consistent. 

There exists an asymptotic proof of the consistency ofT over PA. 

On the other hand, there exists no formal proof of the consistency ofT in T. 

Proof. Let Provy be a relation over (n, m) G such that (n, m) G Provp if and only if n is the 
Godel number of a formula (say ip) and m is the Godel number of the proof of ip in T. 

Then, T is consistent if and only if 

Vm G N (n*, m) ^ ProvT’, 

where n* is the Godel number of T (T is A ->ip for a formula ip). 

Since T is a primitive recursive extension of PA, ProvT is a primitive recursive relation. Then, 
from Proposition|21 there exists a Ai-formula, ProvT(x, y), that represents relation Provp in PA. 
Therefore, there exists an asymptotic proof of the consistency of T over PA as follows: 

Va: G N PA h ^ProvT(|"T],x) (2) 


if and only if T is consistent. 

On the other hand, even if T is consistent, 

PI/ Vx-iProvT([T],x) 

by the second Godel incompleteness theorem. 


H 

We now consider the computational complexity of producing an asymptotic proof. Section [2.71 
introduced the concept of a polynomial-time proof, that is a proof produced by a PTM. Then, we 
have a combined concept, an asymptotic proof produced by a PTM as follows: 
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Definition 8. If an asymptotic proof of Qixi • • • Qfc Xfc ... ,Xfc) is produced by a PTM, i.e., 

3e G N Qixi G N • • • QkXk G N PTMe(a:i ,.. .,Xk)\-T ■ ■ • ,Xfc), 

then we say “a PTM asymptotically produces a proof of Qixi • • • Qk Xfe (^(xi,..., x^) over T, ” 
or “QiX-i ■ ■ ■ Qk Xfc ipfx. 1 ,... ,Xfe) has a polynomial-time proof (is polynomial-time provable) over 

Similarly, if an asymptotic proof of QiXi • • ■ Qk x^ </5(xi,..., x^) is produced by a machine in 
computational class C, then we say “a machine in C asymptotically produces a proof o/QiXi • ■ • Qk 
Xfc ipfxi,... ,x.k) overT,” or “Qixi ■■•Qk ^k </3(xi,... ,Xfc) has aC proof (is C provable) over 

V 

A variant of Lemma [T] demonstrates an example of asymptotic proofs produced by a PTM. 

If T is a “PT-extension” of PA, then ProvT ([T], x) in Lemma[7|can be equivalent to PTM-Acpt (v^, [T], x) 
(see Section oni for the notation of PTM-Acpt(vT, •,•))• Next, we obtain the following lemma by 
Theorem CH 

Lemma 9. Let T be a consistent PT-extension of PA. 

There exists an polynomial-time proof of the consistency of T over PA. That is, 

3e G N Vx G N PTMe(x) hpA -'PTM-Acpt(v 7 ’, |’T],x). (3) 

2.9 Representability Theorem of Polynomial-Time Proofs 

Definition 10. 1. Let R be a k-ary relation on N, i.e., R C A formula pij(xi,... ,Xk) (in 
which only Xi,..., x^ occur free) will be said to polynomial-time represent relation R in theory 
T if and only if there exists e/j G N such that for every ai,... ,ak m N^, 

(ai,...,afc) G i? => PTMe^(ai,... ,afc) hr Pfl(ai,... ,afc), 

(oi,..., afc) ^ i? => PTMe^(ai,..., Ofc) hr , a/c). 

2. Let f be a k-place function on natural numbers ai,...,ak. A formula p/(xi,..., x^, y) (in 
which only xi,..., x^, y occur free) will be said to functionally polynomial-time represent f in 
theory T if and only if there exists e/ such that for every ai,... ,ak inN^ 

PTMe^ , Ofe) \-T Vy(p/(ai,..., a*,, y) ^ y = 

Theorem 11. (Polynomial-Time Representability Theorem) For any polynomial-time computable 
relation on R, and any polynomial-time computable function on N*, f, there exist formulas, 

Pfi(xi,... ,Xfe) and p/(xi,... ,Xfc,y), such that: 

— pi{(xi,... ,Xfc) polynomial-time represents R, and p/(xi,...,x^,y) functionally polynomial¬ 
time represents f in PA. 

- / 0 fl(xi,... ,Xfc) and /9/(xi,... ,Xfc,y) are Ai in PA. 


PA G Vxi • ■ • Vxfc3!y p/(xi,... ,Xfc,y). 

Proof. For simplicity of description, we consider the case of relation R with only one free variable 
X. It is straightforward to extend this result to the cases with multiple free variables and functional 
representability. 

First, we will introduce two function symbols, | ■ | and Bit(-,-), which are intended to denote 
the length of the binary representation of a numeral and the f-th rightmost numeral (0 or 1) of 
the binary representation of a numeral, respectively. 
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Claim. 


PA h Vx > 0 3!n 2"“^ < x < 2". 

Proof. We will use the induction axiom in PA. We can prove the following by using the axioms of 
PA easily (e.g., by proving 1 + 1 = 2:= 2^): 

PA h (2° < 1 < 2^). 

In addition, we can also prove the following by using the axioms of PA (e.g., by using the axiom, 
VxVy(x + Sy) = S(x + y) etc.): 

PA h Vx ( 3!n (2""^ < x < 2 "Ai) ^ gin (2"^^ < x + 1 < 2") ), 

PA h Vx (3!n (x = 2 "Ai) ^ 2" = x + 1 

^ 2" < X + 1 < 2"+^)) ^ 3!n' (2"'’^ < x + 1 < 2"')). 

Combining the above results, we obtain 

PA h (2° < 1 < 2^) A Vx ((3!n 2""^ < x < 2") (3!n 2"-^ < x + 1 < 2")). 

The induction axiom of PA implies 

PA h (2° < 1 < 2^) A Vx (3!n 2"~^ < x < 2" ^ 3!n 2"’^ < x + 1 < 2") 

^ Vx > 0 3!n 2"^^ < x < 2". 

Hence we obtain finally 

PA h Vx > 0 3!n 2"'^ < x < 2". 

3 

Following the claim above, we will introduce a function symbol, | • |, in PA, which is intended 
to denote the binary expression length of numeral x, such that 

PA h Vx > 0 Vn (2““^ < X < 2" n = |x|). (4) 

Claim. 

PA h Vx > 0 Vn (2'"^^ < X < 2" ((2"~^ < x < 2""^ + 2"^^) V (2""^ + 2""^ < x < 2")) 

We omit the proof since it is similarly obtained. 

Claim. 

PA h Vx > 1 Vi < |x| 3!xi <2 3!y < 2‘ 3!z < 21’"!^'’^^ 

(x = y + Xj • 2' + z • 2*+^). 

This claim can be proven by applying the previous claims repeatedly. 

Based on the claim above, we will introduce a function symbol, Bit(-), in PA, which is intended 
to denote the +th rightmost value of the binary expression of a numeral 

PA h Vx > 1 Vi < |x| Vx, <2 3!y < 2‘ 3!z < 2l’"l-*-^ 

( X = y + Xi • 2* + z • 2'’*'^ ^ Xi = Bit(x, i) ). (5) 
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Hereafter, we will also denote the binary representation 

of variable x by [x] = Bit(x, n—1) Bit(x, n—2) • • • Bit(x, 0), where n = |x|. 

In order to construct a formula, / 5 /j(x), in PA which polynomial-time represents relation i?, 
we will employ the approach of constructing a family of polynomial size Boolean circuits that 
represents relation R, which is introduced in Proposition^ (Theorem 9.25 in ESI)- 

Since R is polynomial-time computable relation, there exists a PTM, UpTM(efii Oi that com¬ 
putes relation R correctly. Then, R can be decided by a family of Boolean circuits, {B^ \ n G N}, 
that are polynomial size in n. 

Before showing formula p/j(x), we will show how to construct a family of Boolean circuits, 
{Bn I n G N}, based on the description of Theorem 9.25 in ESI 

Let the size of input a; be n bits, and the computation time be t(n) = steps (c is a constant 
determined by each PTM). The circuit is constructed by {n'^)‘^k nodes. The value of each node is 
F (false/O/off) or T (true/l/on), and each value is denoted by light[i,j, s] {0 < i < n’^, 0 < j < n'=, 
0 < s < k). 

light[i,j, s] = T {light[i,j, s] is on) denotes the element of cell[i,j] (i.e., in the i-th. computation 
step and at the j-th leftmost tape square) is the s-th element, where there are k{= 3-|-3€) elements, 
T U r X Q, T = {0,1, U} is the set of tape alphabets, and Q = {go (initial state), gi,..., qi -2 
(reject state), qg-i (accept state) } is the set of states of the underlying PTM to decide x G R. 
light[i,j,s\ = F {light[i, j, s\ is off) denotes that the element of cell[i,j] is not the s-th element. 
The set of the elements is {(0), (1), (U), (go,0), (go,l), (go, LI), . ..,(gj,0), (gi,l), (g*,U), .. .,(g£,0), 
(g^_i,l), (gf_i,U)}. So, for each only one light[i^j,s\ (i.e., only one s) is T (true/l/on) 

and the others are F (false/O/off). Each node is connected to 3fc nodes through A and V gates. 
More precisely, for all i{l <i < n^), for all j(0 < j < n^), for all s(0 < s < k), 

light[i,j, s] = \J {light[i — 1, / — 1, a] A light[i — l,j,b] A light[i — 1, j -1- 1, c], 

{a^b,c)GAs 

where subset Ag = {(oo, bo,co),... ,{at,bt,Ct)} {t < k^) is uniquely determined for each s based on 
the transition function 6 of the underlying PTM to decide x G R. For example, 

- = 1(1,1,1), (1,1,0), (2,3 + 3z - 1,1),...}, where d(g„ 1) = (g„ 0,L). 

- A 2 = 1(1,2, 1 ), (2,3-f 3* - 2,1),...}, where S(qi,0) = {qj, 1,R). 

- A 3 + 3 j_i = 1(0,1, 3 -f 3j - 2),...}, where 6{qj,0) = (g*, 1,L). 

The values of light[0, j, s], for Q < j < rA and 0 < s < fc, are determined by the input 
[a:] = ■ • -a^o", i.e., 

( light\0, 0, 3] = 1 iffa;„_i = 0, 

< 0 ,4] = 1 iffa;„_i = 1 , 

[ Ught]^, 0, s] = 0 for all s with s 3 and s 7 ^ 4. 

( light\0, 1 , 0 ] = 1 iffa ;„_2 = 0 , 

< light\0, 1 , 1 ] = 1 iffa ;„_2 = 1 , 

[ light]}}, 1 , s] = 0 for all s with s 7 ^ 0 and s 7 ^ 1 . 

( light\0, n — 1 , 0 ] = 1 iffa^o = 0 , 

< light}}, n — 1 , 1 ] = 1 iffa;o = 1 , 

[ light}}, n — 1 , s] =0 for all s with s 7 ^ 0 and s 7 ^ 1 . 

f light}},}, 2 ] = 1 for all j > n. 

{ light}}, j, s] = 0 for all j >n and for all s with s 7 ^ 2 . 
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The input [w] {rfk bit string) to Boolean circuit _B„ is 

[w] = 1, l],light^, 1,2],..., light[0, n‘^ — l,k — 1]”, 

The output of the circuit is the value of node light[n‘^ — 1,1, A: — 6], light[n‘^ — 1,1, A: — 5], light[n‘^ — 
1,1, A: — 4] (reject) or light[n‘^ — 1,1, A; — 3], light[rf — 1,1, A: — 2], light[n‘^ — 1,1, A; — 1] (accept). 
We now show formula Pfl(x) in PA based on the above construction of Boolean circuit Bn- 
First we define three formulas: ISET(x, y) in which only x, y occurs free, TRANS(y) in which 
only y occurs free, and EVAL(y) in which only y occurs free. Eormula ISET(x, y) denotes that 
the information of x is transformed/copied to the value of a part of y, formula TRANS(y) denotes 
that the transition history of computing R{x) is mapped to the value of the other part of y, and 
EVAL(y) is true if and only if the evaluation result of R{x) is true. 


ISET(x,y) = 

( (Bit(x, 0) = 0 ^ (Bit(y, 3) = 1 A Vs(0 <s<3 V 3<s<k) Bit(y, s) = 0)) A 
(Bit(x, 0) = 1 ^ (Bit(y, 4) = 1 A Vs(0 <s<4 V 4<s<k) Bit(y, s) = 0)) ) 

A 

( (Vj(0 < j < n) A Bit(x, j) = 0 ^ Bit(y, j • k) = 1 A Vs(0 < s < k) Bit(y, j • k + s) = 0) A 
(Vj < n A Bit(x, j) = 1 ^ Bit(y, j • k + 1) = 1 A Vs(s = 0 V l<s<k) Bit(y, j • k + s) = 0) ) 
A 

( Vj (n < j < n*^) (Bit(y, j •k + 2) = l A Vs(s<2 A 2<s<k) Bit(y, j • k + s) = 0) ). 


TRANS (y) = 

Vi(0 < i < n'^) Vj < Vs < k 

( (3a < k 3b < k 3c < k (? 7 (y, i—1, j, a, b, c, s) ^ Bit(y, i • • k + j • k + s) = 1) 

A 

(Va < k Vb < k Vc < k -i? 7 (y, i—1, j, a, b, c, s) ^ Bit(y, i • n° • k + j • k + s) = 0) ). 

Here, formula g{-) is uniquely fixed for each s based on the transition function 5 of the underlying 
PTM to decide x € R, and corresponds to subset Ag {0 < s < k) in the above-mentioned Boolean 
circuit Bn- In more detail, g{-) is formulated as follows: 

v(yA-lJ,a,b,c,s) = 7?o(a,s,Bit(y, (iVl) .n‘=-kT (jVl)-k + a)) A 

7?i(b,s,Bit(y, (i-1) • n° • k + j • k + b)) A 
772 (c,s,Bit(y, (i-1) • • k + (j -h 1) • k + c)). 

Remark: If j = 0 (or j = n'^ — 1), then a (or c) is ignored. 

EVAL(y) = 3s (k—4 < s < k) Bit(y, (n^^—1) • • k -f s) = 1. 

Finally 

Pr{x) = 3!y < 2""°*^ (n= |x| AlSET(x,y) ATRANS(y) AEVAL(y)). 
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By the above-mentioned formula, pr{'x.), for any input x S N ([x] = x„_i • • - Xq), numeral y 
([y] = y(n‘=) 2 fc-i • • • yo)) is uniquely determined, and the truth or falsity of /3 _r(x) is also determined 
by the truth or falsity of term EVAL(y). 

It is clear from Proposition O that formula Pfl(x) represents i?, since each atomic formula of 
pnipi.) represents the corresponding atomic execution of UpTM(e_R, x), and such atomic execution 
is primitive recursive. That is, for all x G N 

UpTM(e_R, x)accepts PA h 3!y < 2" (n = |x| AlSET(x, y) A TRANS(y) AEVAL(y)). 

UpTM(efl, x)rejects => PA h 3!y < 2" (n = |x| AlSET(x, y) ATRANS(y) A ^EVAL(y)). 
Since a is represented by the binary form of numerals, and the proof tree of the formula, 

2"-^ <a<2"4->n= |al, 

can be constructed in 0(|al), there exists cl G N such that for every a in N, 

PTMe^ (a) hpA Vn (2"“^ < a < 2" ^ n = |a|). 

Similarly, Bit(-) can be also functionally polynomial-time represented. 

Given a G N, in order to evaluate formula pjj(a), we need to evaluate function | • | once, 
polynomially many repetitions of function Bit, and polynomially many repetitions of formula 
where the size of formula rj is constant in |a| and p is Z\i-formula (since all quantifiers in p are 
bounded). 

Therefore, in total, formula pr{sl) can be functionally polynomial-time represented. 

We now introduce formula ^^(x, y) that is defined by 

n=|x| AlSET(x,y) ATRANS(y). 

Here, p}j(x, y) represents a polynomial-time function, which, given x, computes y. (Usually, a part 
of execution history, y, is output in a polynomial-time function.) 

Then, 

Pfl(x) = 3!y < 2"^°*" ( ^(x,y) A EVAL(y) ). 

By repeatedly proving an atomic formula on a pair of bit parts (pair of laws) of the binary 
expression of y, we obtain 

PAG Vx3!y<2""°‘" (n = |x| AlSET(x,y) ATRANS(y)), 
where |x| and Bit(x, i) for x < 2 are defined additionally. That is, we obtain 

PA h Vx 3!y < 2"''°’" ^(x,y). 
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2.10 Formalization of Polynomial-Time Proofs 

Let be a set of an infinite number of formulas, {(^(a) | a G N}. 
Let formula 

PTM-Out(e, [^>],a,b) 
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polynomial-time represent 


UpTM(e, (p, #^, a)) = b 


over natural numbers, (e, o,6), and formula 

PTM-Acpt(v 7 ’, |'(p(a)],b) 


polynomial-time represent 

Uptm(?^t, (#p(a), 6))accepts 

over natural numbers, (wp, #(/7(a), b). (For the definition of up, see Section ITTI ') Here, these formulas 
are constructed by following (the multiple-variable version of) the method of constructing a formula 
that was shown in the proof of the polynomial-time representability theorem iTheorem lllll . 

Then, 

Prp[<p(a)](e, [<?],a) = 3b < ( PTM-Out(e, , a,b) A PTM-Acpt(vp, [(p(a)], b) ), 

where c is uniquely determined by e (i.e., there is a primitive recursive function / such that 

c = /(e).) 

Clearly, Prp[(p(a)](e, [^],a) represents the relation 

PTMe(a) hp p(a) 

over natural numbers, (e, a) G (for the definition, see Section ITTIl . Then, for any (e, a) G 

N3, 


PTMe(a) hp p(a) ^ PA h Prp[(p(a)](e, a), 

PTMe(a) I/p (p(a) => PA h -.Prp[p(a)](e, , a). 

Here, note that the above-mentioned relation over (e, a) is polynomial-time decidable in a 
with a fixed value of (e, /^^), but that the asymptotic computational complexity of this relation in 
(e, is not explicitly specified. However, the way of constructing a formula shown in the proof 
of Theorem m can be applied to any primitive recursive relation. 

Here it is worth noting that, although formula Prp[i^(z)](x, y, z), with free variables x, y and 
z, is specified by the construction shown in the proof of Theorem CH there still exists ambiguity 
with regard to details of the formula. However, notation Prp[i^(z)](x, y, z) means a fixed formula 
selected from among the possible formulas. The difference of a formula selected from them does not 
affect the results in this paper. It is important to note that the fixed formula of Prp[(/?(z)](x, y, z) 
is assumed throughout this paper. 

Informally, formula (sentence) Prp[(/j(a)](e, |"??],a) is true if and only if UpTM(e, •), on input 
(p, a) G N^, outputs a proof tree of formula (p(a) G in theory T. Here, note that [ • ] does 
not mean a variable part of the formula, but just implies the target for UpTM(e, (p, a)) to 

prove, while ( •, •, • ) means a variable part of the formula. Therefore, the part of Pr-p in formula 
Prp[(p(a)](e, |"?^],a) identifies the form of the formula (like p in p(e, [^],a)). The part of [ip(a)] in 
the formula is perfectly redundant and is not necessary to identify the formula, but helps readers in 
understanding the meaning of the formula. (Note that Prp[X](., •, •) is a single formula, regardless 
of X.) 
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3 Incompleteness Theorems of Polynomial-Time Proofs 

This section shows the polynomial-time proof version of the (second) Godel incompleteness theo¬ 
rem. First, we introduce the Godel sentences of polynomial-time proofs, and the first incomplete¬ 
ness theorem of polynomial-time proofs. We then present the second incompleteness theorem of 
polynomial-time proofs, based on the the first incompleteness theorem and the derivability condi¬ 
tions of polynomial-time proofs. 

3.1 Derivability Conditions of Polynomial-Time Proofs 

This section introduces several properties, the derivability conditions of polynomial-time proofs. 
(They correspond to the derivability conditions regarding conventional incompleteness theorems.) 
These properties are used to prove the (first and second) incompleteness theorems of polynomial¬ 
time proofs in this paper. 

Lemma 12. (D.l of PTPs) Let <!> = {(/j(a) | a £ N} be a set of an infinite number of formulas. 
Suppose that T is a PT-extension of PA. Then the following holds for all e,T: 

For any e £ N and any a £ N there exists e* £ N such that 

PTMe(a) Ft ‘^(a) 

^ PTMe.(a) hpA PiT[^(a)](e, [<?],a). 


Proof. Since 


PTMe(a) Ft T{a) 

is a polynomial-time relation computed by UpTM(e, (#^, •)) and Uptm('*^T) (') O)? given a £ N, 
such that 


UpTM(e, (#^,a)) = #7r A Uptm(wt, (#</5(a), #7r)) accepts. 
Therefore, this result is obtained immediately from Theorem 11II 
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Lemma 13. (D.2 of PTPs) Let <P = {i^(a) | a £ N}, 17 = {‘^(a) — > '0(a) | a £ N}, and 
T = {0(a) I a £ N}. Suppose that T is a PT-extension of PA. 

For all ei £ N and for all 62 £ N, there exists 63 £ N such that 

PAF Vx ( PrT[(/j(x)](ei, |■<?],x) A PrT[v 5 (x) ^ 0 (x)](e 2 , [17],x) 

^ PrT[0(x)](e3, [!F],x) ). 

Proof. First, we introduce a two-place polynomial-time function, h, over such that 

{ ffiT if there exist proof trees tti and 7 r 2 in T 
such that s = ffni, t = #7r2. Here 
TT =< 0, Modus Ponens > [ 1 ^ 1 , 712 ]. 

0 otherwise. 

(Given s £ N, it is polynomial-time (in |s|) computable to check whether u is the Godel number 
of a proof tree in T in a syntactic sense as a symbol sequence.) 

PTM UpTM(e 3 , •) is constructed by using two PTMs, UpTM(ei, (p, #1?, •)) and UpTM(e 2 , (p, #17, •)), 
and function h as follows: 
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1. (Input: ) (j),#W,x) G N^. 

2. (Output: ) Godel number of a proof tree of or 0- 

3. Run the following computation 


UpTM(ei, {p, #^, x)) = s, 

UpTM(e2, (p, #12, x)) = t. 

4. Compute h{s,t) and output the result. 

Since function h is primitive recursive, there exists a Z\i-formula, p(s,t,u), in PA which rep¬ 
resents function h such that (from Proposition |2J) 

PA h Vs Vt 3!u /j,(s,t,u). 

We now introduce function symbol h in PA, then 

PA h Vs Vt Vu (/i.(s,t,u) u = /i(s,t)). 


That is, 

PA h Vs Vt 3!u u = /i(s,t). 

Therefore, for all ei G N and for all 62 G N, 

PA h Vx Vs Vt 3!u ( PTM-Out(ei, s) A PTM-Out(e 2 , |'J7],x,t) ) 

—> ( PTM-Out(ei, [(p],X,s) A PTM-Out(e 2 , |"l7],x,t) A u = ft,(s,t)). 

See Section r2.1 Ol for the definition of notation PTM-Out(-). 

Then, by the construction of UpTM(e 3 , ■), for all ei G N and for all 62 G N, there exists 63 G N 
such that 

PA h Vx Vu 

( 3!s z]!t (PTM-Out(ei, |'^],x,s) A PTM-Out(e 2 , |’l7],x,t) A u = h{s,t) ) ) 

^ PTM-Out(e 3 , |■|p'],x, u) ). 

Therefore, for all ei G N and for all 62 G N, there exists 63 G N such that 

PA h Vx Vs Vt 3!u ( PTM-Out(ei, [(p],X,s) A PTM-Out(e 2 , [iVljX,t) 

^ PTM-Out(e 3 , [!?'],x,u). ( 6 ) 

On the other hand, a polynomial-time computation (relation) of UpTM('r'T, (##, u)) over (up, ##, u) 
is composed of two computation parts as follows: 

1. If u = 0, reject. Otherwise, check whether there exists a proof tree tt, in which u = #7r, and 
whether the inference of the root node of tt is correct. If both of them are valid, go to next 
step. (For example, if tt =< ro,ri > [^ 1 , 712 ], then check whether inference from ( 711 , 712 ) to rg 
by the rule of inference ri is correct. If u = h{s,t) and /i(s,t) ^ 0, then s = #7ri, t = # 772 , 

To = #(x) and ri is Modus Ponens. Hence, if the inference is correct, tt 2 should be tti ^ #. ) 

2. Let TTi and tt 2 be parent nodes of the root node of tt. Check whether tti and tt 2 are valid proof 
trees in T. 
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Since the first computation part is primitive recursive, we can construct formula i^(u) to rep¬ 
resent the first computation (relation) part of UpTM('yTj w)), over m S N. Then from the 
definition of h, we obtain 

PA h Vs Vt 3!u ( j^(u) A u = /i(s,t) ). 

Then, 

PA h Vx Vs Vt 3!u ( (PTM-Acpt(vT, #</ 3 (x), s) A PTM-Acpt(v 7 ’, #</ 9 (x) ^ ^(x),t)) 

^ ( PTM-Acpt(vT, #(^(x), s) A PTM-Acpt(vT, #(^(x) — > '(/'(x), t) 

A ( i^(u) A u = h{s,t) ) ). 

See Section rrm for the definition of notation, PTM-Acpt(-). 

Here, 

PA h Vx Vs Vt 3!u 

( PTM-Acpt(vT, #(/ 3 (x), s) A PTM-Acpt(v 7 ’, #(/j(x) ^ ■!/;(x), t) A ( i^(u) A u = /i(s,t))) 
^ PTM-Acpt(vT,#'0(x),u) ). 

Therefore, 

PA h Vx Vs Vt 3!u ( PTM-Acpt(v'r, #</ 5 (x), s) A PTM-Acpt(v 7 ’, #i^(x) —> ^/!(x),t) 

^ PTM-Acpt(v'r, #V'(x), u) ). (7) 

Hence, combining Eqs. @1 and o, for all d £ N and for all 62 £ N, there exists 63 £ N such 
that 

PA h Vx Vs Vt 3!u 

( ( PTM-Out(ei, |'^],x, s) A PTM-Acpt(v 7 ’, #(/j(x), s) ) 

A ( PTM-Out(e 2 , |'fV],x,t) A PTM-Acpt(vT, #(/?(x) ^ ■!/;(x), t) ) 

^ PTM-Out(e 3 , |’!f'],x, u) A PTM-Acpt(vT, #t/’(x), u) ). 

Therefore, finally we obtain that for all ei £ N and for all 62 £ N, there exists 63 £ N such that 
PAh Vx ( PrT[v 5 (x)](ei, |■^>],x) APrT[(A(x) ^ V'(x)](e 2 , rf2],x) ^ PrT[V'(x)](e 3 , ,x) ). 

3 

Corollary 14. Let <P = {(/^(a) | a £ N} and W = {'0(a) | a £ N}. Suppose that T is a consistent 
PT-extension of PA. We assume 

T h Vx (<^(x) ^ '0(x)). 

Then, for all ei £ N there exists 62 £ N such that 

PA h Vx ( PrT[v 5 (x)](ei, r<?l,x) ^ PrT[ 0 (x)](e 2 , r'fl,x) ). 

Proof. From the first derivability condition (D.l) of a traditional proof theory [2] and the assump¬ 
tion of this lemma, we obtain 

PA h Prrd'Vx ((/?(x) ^ ^(x))]). 

Then, PTM UpTM(e 2 , •) is constructed by using PTM UpTM(ei, (p, •)) as follows: 
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1. (Input :) {p,#W,x) 

2. (Output: ) Godel number of a proof tree of or 0- 

3. Run the following computation 

UpTM(ei, {p, #<?, x)) = z, Uptm(?^t, (#</5(x), z )). 

4. Compute the proof (say 712 ) of Vy ((p(y) —> ^^(y)), since there exists a proof for the predicate 
from the assumption. (The computation time is finite i.e., constant in Size^(x) and Sizeii7(a:).) 

5. Check whether UpTM(r'Tj accepts or rejects. If it rejects, output 0 and halt. If it 

accepts, then combine tti {z = #7ri) and 7r2 and make a new proof tree, 7r3, for '!/’(x), as follows: 

TTa = < '0(x), Modus Ponens > [tti, < (/ 3 (x) —> ^/’(x), Modus Ponens > [ 772 , Axiom X]], 

where Axiom X is a logical axiom, “Vy (v5(y) ^ '4’i'y)) (v(^) ^ '0(^))”- 

6 . Output TTa for the proof tree of formula 

The other part of the proof can be completed in an analogous manner to that in Lemma, 1 131 
except for the constructions of functions h and g to meet the above-mentioned construction of 
UpTM(e 2 , •)) iri this proof. 


H 

Corollary 15. Let (p = {(/ 3 (a) | a G N}, L' = {V'(a) I a V N}, and Q = {:/3(a) A '0(a) | a G N}. 
Suppose that T is a PT-extension of PA. For all ei G N and all 62 G N, there exists 63 G N such 
that 

Th Vx ( PrT[(/ 3 (x)](ei, [<I>],x) A PrT[' 0 (x)](e 2 , [ifl, x) 

^ PrT[</ 7 (x) A 0 (x)](e 3 , |■I2],x) ). 

Proof. By using the following logical axiom of first order logic: 

^ (0 ^ i'pA'ip)), 

and the derivability condition D.l. of the standard proof theory [2], we can obtain 

Th PrT(rVy ((^(y) ^ (0(y) ^ (^^(y) A 0(y)))]). 

By applying Corollary 1 141 we obtain 

Th Vx( ( PrT[:^(x)](ei, |■^>],x) A PrT[ 0 (x)](e 2 , [T], x)) 

^ (PrT[(0(x) ^ ((^(x) A 0 (x))](e 3 , [I7'],x) A PrT[ 0 (x)](e 2 , [T],x)) 

^ PrT[v 3 (x) A 0 (x)](e 3 , [I2],x) ). 


H 

Lemma 16. (D.3 of PTPs) Let R he a polynomial-time relation overN. Let formula pr { x ) (in 
which only x occurs free) polynomial-time represent relation R in theory T, and the concrete form of 
formula pr(x) follow the construction given in the proof of TheoremM 1\ Let TZ = {p_R(a) | a G N}. 
Suppose that T is a consistent PT-extension of PA. Then, there exists e G N such that 

PAh Vx ( pr(x.) PrT[pfl(x)](e, [7e],x) ). 
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Proof. Here we will follow the notations employed in the proof of Theorem m 

Formula /Ofi(x) has two atomic functions, | • | and Bit(-), and three atomic formulas t7o(’)) ^i(') 
and r] 2 {-). Since /Ofi(x) is a Z\i-formula, these atomic functions and formulas are composed by a 
finite number of logical symbols, A, V, —and bounded quantifiers. Here bounded quantifiers 
can be replaced by a finite number of A and V. 

Hence, by applying Lemma IT!^ and Corollaries 1 1 41 and 1151 formula Pr 7 ’[p/j(x)](e, |’7?.],x) can be 
deduced from a logical composition of the corresponding atomic formulas, 

PrT[w = |z|](e 3 , [/:], (z,w)), PrT[w = Bit(z)](e 4 , [e], (z,w)), 

PrT[r?*(z, w, v)](e,, \£f \, (z, w, v)), 

PrTh(w = |z|)](e 3 , |■£*]:(Z:w)), PrTh(w = Bit(z))](e^, |■fi],(z,w)), 

PrTh^i(z, w, v)](e*, \S*^ , (z, w, v)), 

where i = 0,1, 2. 

Therefore, to prove this Lemma it is sufficient to prove the following atomic formulas: 

3e g N PA h Vz Vw ( (w = |z|) ^ PrT[w = |z|](e, [£], (z,w)) ), 

3e G N PAL Vz Vw ( (w = Bit(z)) —> PrT[w = Bit(z)](e, [B], (z, w)) ), 

3e G N PAL Vz Vw Vv ( 77 j(z) ^ PrT[? 7 *(z,w,v)](e, [£■*], (z,w,v)) ), 

3e G N PAL Vz Vw (-'(w = |z|) —> PrT[“'(w = |z|](e, [T*], (z, w)) ), 

3e G N PAL Vz Vw (-'(w = Bit(z)) ^ PrT[^(w = Bit(z))](e, [S*], (z,w)) ), 

3e G N PA h Vz Vw Vv (-.r 7 i(z, w, v) ^ PrT[-'r 7 i(z, w, v)](e, (z,w, v)) ), 

where z = 0,1, 2. 

We will then show a construction of UpTM(e, •) that outputs a proof tree of each atomic formula. 
First, UpTM(e, •) for atomic function | ■ | is as follows: 

1. (Input:) (p, #£, z, w), where £ = {a = |b| | a G N, 6 G N} 

2. (Output:) ffiTL or 0, where ttl is a proof tree of formula w = |z| in PA, and 0 means “Fail”. 
Note that z and w are given in binary form such as 

Zg + Zi • 2 + • • • + Zm_i • 2^"^ 

(more precisely, Zg + zi • SSO + • • • + z„_i • SSO • SSO • • • • SSO), 

Wg + Wi • 2 H-h Wt_l ■ 2*”^. 

3. Check whether 2'^~^ < z < 2^ or not. If it is false, output 0. Otherwise, go to next step. 

4. Make a proof tree, ttl, of 2'^^^ < z < 2^ by showing z' = Zg + Zi • 2 + • • • + 2 ^ 1-2 ■ 2'^^^ and 

z" = TqPxi- 2 + • • • + Zi „_2 • 2'^^^, along with the proof tree of z = +z' and z + z" = 2 '^, 

where Zi denotes the complement of z^ (e.g., if z^ = 0 , ^ = 1 ). 

(Note that w in the above equations is expressed in binary form.) 

PTM-Out(e, |'£],z,w,y) represents the above-mentioned computation (function) of UpTM(e, 
(p, #£, z,w)) to output y such that y = ffirr or p = 0. (For PTM-Out, see Section 12.1011 . From 
the definition of | • |, 

PA h VzVw (w = |z| (2'^^^ < z < 2’")). 

In addition, from the construction of UpTM(e, (p, #£, z, w)), 

PA h VzVw (2^^"^ < z < 2^^) ^ PTM-Out(e, [£], z, w, [ttl]). 
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Since PTM-Acpt(vT, |"z = |w|], [TTi]) represents computation UpTM(wr,(#z = |w|,#7ri)) (see 
Section ITTUIl . 

PA h Vz Vw 3!y (w = |z| A PTM-Out(e, [£],z,w,y)) ^ PTM-Acpt(v 7 ’, [w = |z|],y) ). 
Namely, 

PAP Vz Vw ( (w = |z|) ^ PrT[w = |z|](e, [£], (z, w)) ). 

We can also prove similar results on -i(w = |z|), (w = Bit(z)), and -i(w = Bit(z)) in a manner 
similar to that on (w = |z|). 

We will now prove the results on formulas rji {i = 0,1,2). 

Since the values of variables of formula rji (i = 0,1,2) are bounded by constant k and the 
number of variables is also bounded by 3, all possible evaluation values of r]i {i = 0,1,2) with 
possible values of variable are bounded by a constant. This means that a proof of each possibility 
of formula r]i {i = 0,1, 2) can be created ahead of time and stored by PTM UpTM(e, •)■ So, the role 
of PTM UpTM(e, •) is just pattern matching against the value of the input variables. 

Given an input value, UpTM(e, •) outputs the Godel number of a proof tree of formula 
(i = 0,1, 2) as follows: 

1. (Input:) (p, [fi], 2 , 10 , u), where = {? 7 i(a,b,c) | a S N, 6 S N, c S N} 

2. (Output:) #7rE_i(z, w, v) or 0, where 7r£;_i(z, w, v) is a proof tree of formula ? 7 i(z, w, v) in theory 
PA. 

3. (Preprocessing Phase before getting Input) List up all input values of {z,w,v) for which 
? 7 i(z, w, v) is true (say the list “TList”). Make (the Godel number of) a proof tree, TTE^iiz, w, v), 
of r 7 i(z, w, v) for all values of {z, w, v) G TList. Make a list of (the Godel number of) the proof 
trees along with TList, which is retrieved by entry (z, w, v) (say PList; {{{z, w, v), ^TrE,i{z, w, v)) | 
(z, w, v) G TList} ). Note that the size of PList is finite and constant in the size of input x to 

pr{-)- 

4. Given input (z, w, v), search PList by the input. If entry (z, w, v) is found in PList, output the 
corresponding ^TrE,i{z,w,v). Otherwise, output 0. 

Let PTM-Out(e, [fi],z, w, v,y) be a formula to represent the computation, UpTM(e, (p, 
z, w, u)) = y, where y = nE,iiz, w, v) or ?/ = 0. 

Since the computation is just pattern matching, the formula should be effectively equivalent to 
the following form: 

VzVwVv3!y ( ((z, w, v) = (zq, wq, Vq) ^ y = ttq) 

A ((z,w,v) = (zi,wi,vi) ^ y = 7ri) 


A ((z, w, v) = (zif, Wx, Vif) ^ y = 7 r/f), 

A ((z,w,v) 7^ (zo,wo,Vo) A (z,w,v) 7^ (zi,wi,vi) 

A (z,w,v) 7^ (zif,WK,v;f) ^ y = 0 )), 

where TList = {{zo,wo,vo), {zi,wi,vi),..., {zk,wk,vk)}- 
From the construction, 

PA (- Vz Vw Vv ( r]i{z, w, v) 

^ ( (z,w,v) = (zo,Wo,Vo) V (z,w,v) = (zi,wi,vi) •••V (z,w,v) = (z^,w/f,Vic) ) ). 
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For all* (0 < J < K), 

PA h Vz Vw Vv ( (z, w, v) = (zi, Wi, Vi) ^ PTM-Out(e, |■£■i],z,w,v, [TTi]) ). 

For alH (0 < z < K), 

PAh Vz Vw Vv ( (z, w, v) = (zi, Wi, Vi) ^ PTM-Acpt(vT, r??i(z, w, v)], [TTi]) ). 

F[ence, 

PAh VzVwVv3!y {r]i{z,w,v) PTM-Out(e, [fi], z, w, v, y) A PTM-Acpt(vT, r??i(z, w, v)], y) ). 
Namely, 

Th Vz Vw ( r 7 i(z, w, v) ^ PrT[77i(z, w, v)](e, [fi], z, w, v) ). 

We can also prove a similar result on -i77i(z,w,v) in a manner similar to that on ? 7 i(z,w,v). 

H 


3.2 Recursion Theorem of Polynomial-Time Proofs 

Proposition 17. (Recursion Theorem) Let \J(t, {■,■)) be a Turing machine that computes a two- 
place function: N x N —*■ N. There exists a Turing machine U(fc, •) (i.e., there exists k £N) that 
computes a function: N ^ N, where for every ru £ N, 

V{k,w)=V{t, {k,w)). 

(Note: for notation U(-, •), see Section 

For the proof of this proposition, see [231 (Section 6.1). The point is that we can construct a 
Turing machine UpTM(fc, ■) that can read its own code, k. Note that the computational complexity 
of reading its own code is constant in (independent from) input size, \w\. U(fc, •), on input w, first 
reads k, and then simulates U(t, (•, •)) on input {k,w). 

By using this proposition, we can obtain the PTM version of the recursion theorem. 

Lemma 18. (PTM and formula version of Recursion Theorem) Givent £ N, let formula 7 

in which only k and w occur free, polynomial-time represent function UpTM(t, ik,w)) on {k,w) £ 
Then, for any f £ N, there exists /c £ N and formula pk such that formula pk(w), in which 
only w occurs free, polynomial-time represents function UpTM(fc) w) on w €N, and 

PAhVw (/9fc(w) ^ ^t(k,w)) 

Proof. From the recursion theorem (Proposition EJj for any t £ N, there exists fc £ N such that 
for any w £ N, 

UpTM(fc, w) = Uptm(L (k, w)). 

Here, PTM UpTM(fc, •) runs as follows: 

1. (Input:) re £ N 

2. (Output:) accept/reject 

3. First, read its own code, fc £ N via the recursion theorem (Proposition 1 1 711 . 

4. Simulate PTM UpTM(t, (•, •)) on input {k,w). 

5. Accept if and only if Uptm(L ik,w)) accepts. 
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Therefore, the difference between Uptm(^j w) and Uptm(^j (k, w)) is the step in which Uptm(^, w) 
reads its own code, fc, while UpTM(f, {k,w)) obtains k as an input. 

Let Pfe(w) polynomial-time represent Uptm(^j'w). Let d(k) represent the computation of the 
step in which UpTM(fcj'w) reads its own code, k. 

Since lJpTM{k,w) can always reads its own code, k, clearly from Proposition |21 there exists 
k gN such that 

PAh 6»(k). 

Then, there exists fc S N such that 

PA t- Vw ( 6»(k) A ^t(k, w) ^t(k, w) ). 

Since formula (d(k) A^t(k, w)) polynomial-time represents UpTM(fc,'a’) from Proposition 0] we 
identify it by pfc(w). Then, there exists fc G N and /9fc(w) such that 

PAh Vw ( pfc(w) ^ 6(k,w) ), 


3.3 Godel Sentences of Polynomial-Time Proofs 

Lemma 19. Let T be a consistent PT-extension of PA. Then, for any e G N, there exists a set of 
formulas, Q = {pe,T(a) I a V N}, such that 

PAhVx (pe,T(x) ^ -.PrT[pe,T(x)](e, [(y],x) ). 

For all X, pe,T(x) is called a “Godel sentence” with respect to PTM. 

Proof. Given e G N and theory T, PTM Uptm(^, {k,x)) in Lemma ITHl is specialized to this lemma 
as follows: 

1. (Input:) (fc,a;)GN^ 

2. (Output:) accept/reject 

3. Construct formula pfe(x) that polynomial-time represents the computation of UpTM(A:,a;) via 
the polynomial-time representability theorem iTheoremlTTll. Let Qk = {pfe(a) | a G N}. 

4. Construct PTM UpTM(e, (p, x)) to produce a proof of formula Pk{^)- Then, check whether 

it outputs a valid proof tree of the input by using UpTM('yT)-)- That is, verify whether the 
following holds or not: 

PTMe(a:) hp /9fc(x), 

i.e.,, check 

UpTM(e, (p, a;)) = 2 / A Uptm(^^t, (#Pfc(x), y)) accepts, 

5. Accept if and only if the above-mentioned relation “does not” hold. 

It is clear from the definition of formula Pr^ [•](•, •, •) in Section l^.lOl that -'Pr 7 ’[pfc(x)](e, x) 
represents the above-mentioned relation that UpTM(i, (k,x)) accepts. 

Therefore, from Lemma m for any t G N (i.e., for any e G N), there exists k G N and formula 
Pk such that 

PAhVx (pfc(x) ^ -.PrT[pfe(x)](e, [C/fc],x) ). 

We rename pk as Pe,T, which is a special symbol for a “Godel sentence” with respect to PTM, in 
this paper. (We also rename Gk as G-) 

H 
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3.4 The First Incompleteness Theorem of Polynomial-Time Proofs 

Theorem 20. Let T be a consistent PT-extension of PA. Let /9e,T(a) be a Godel sentence with 
respect to PTM, where a £ N. 

For aH e £ N and all x £ N, 

Pe.T(x). 

Proof. Assuming 

3e £ N 3x £ N PTMe(x) hr Pe,T{^), (8) 

then 

3e£N 3 x£N PA(- PrT[pe.T(x)](e, [^1, x), (9) 

from Lemma [12 

On the other hand, Eq. m implies 

3e £ N 3x £ N T h pe^ri^)- 

According to the property of the Godel sentence with respect to PTM fLemma llOII . for any e £ N 


PAhVx (pe,T(x) ^ -.PrT[pe.T(x)](e, |■0],x) ). 


Therefore, 

3e £ N 3x £ N Th -iPrT[pe.T(x)](e, , x). (10) 

Since T is a consistent PT-extension of PA, Eq. 0 contradicts Eq. (nni. 

Thus, 

PTMe(x) I/t pe.r(x). 

3 


3.5 The Second Incompleteness Theorem of Polynomial-Time Proofs 

Theorem 21. Let T be a consistent PT-extension of PA. For any e £ N and any set of formulas 
F = {ipia.) I a £ N}, there exists e* £ N such that for any x £ N 

PTM,ix)\/T -PrT[V'(x)](e*,['fl,x). (11) 

Proof. Let G = {pe,T(a) | a £ N} be a set of Godel sentences with respect to PTM. Let G^ = 
{PrT[/9e,T(a)](e, [0],a) | a £ N}, ^++ = {^pe,T{a) | a £ N}, and t/+++ = {pe,T(a) A ^Pe,T(a) 
a £ N}. 

For any e £ N, there exist e’*' £ N, £ N and £ N such that 

PAL Vx ( PrT[pe.r(x)](e, |■^],x) 

^ PrT[PrT[pe.r(x)](e, |■^],x)](e+, |■^/+],x) (by Lemma Uni 
^ PrT[-'Pe,T(x)](e++, [0++],x) (by Lemma 112 and Corollarv lldll 
^ PrT[pe.T(x)](e, |■^],x) A PrTh/9e.T(x)](e++, |■a++],x) 

^ PrT[/9e.T(x) A-'/9e,T(x)](e+++, [0+++],x) ). (by Corollary|T2l (12) 

For any formula family F = {'0(a) | a £ N}, 

PAh Vx ( pe,T(x) A-'Pe,r(x) ^ '0(x) ). (13) 
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Hence by Corollary ^1 for any G N, there exists e* £ N such that 

PAh Vx ( PrT[pe,T(x) A ^pe,T(x)](e+++, |■0+++],x) ^ PrT[V'(x)](e*, [ifljX) ). (14) 

Therefore, for any e £ N, there exists e* £ N such that 

PA h Vx ( PrT[/Oe.T(x)](e, |■01,x) ^ PrT['i/'(x)](e*, |■!^'l,x) ). 

That is, for any e £ N, there exists e* £ N such that 

PAh Vx ( ^PrT[V’(x)](eM'if'],x) ^ ^PrT[pe,T(x)](e, [a],x)). 

Since pe,T(x) is a “Godel sentence” with respect to PTM, from Lemma Uni 
PAhVx (pe,T(x) ^ -.PrT[pe,T(x)](e, |■C/],x) ). 

Hence, for any e £ N, there exists e* £ N such that 

PAh Vx ( ^PrT[V'(x)](eM'tf'],x) ^ pe.T(x) ). (15) 

We now assume that there exist e £ N and a formula set 'F such that 

Ve* £ N 3a; £ N PTMe(a;) hy ^PrT[iA(x)](e*, |’tf'],x). (16) 

Then, PTM UpTM(e', •) is constructed using PTM UpTM(e, •) as follows: 

— (Input: ) (p, #5',a) £ where Q' = {pe',T(a) | a £ N}. 

— (Output: ) Godel number of a proof tree of pe'.ri^) or 0. 

— First, read its own code, e' £ N, via the recursion theorem (Proposition El- 

— Syntactically check whether the input has the form of {p,^Q',a) and ^Q' = #{pe',r(a) | a £ 

N}. If it is not correct, output 0. Otherwise, go to the next step. 

— Find a proof, tt, of formula 

Vx (-.PrT[^/’(x)](e*', |■lF],x) ^ pe',T(x) ), 

where there exists e*' £ N such that a proof of the formula exists, according to Eq. lisj. Here, 
the size of tt is constant in |o|. 

— Simulate UpTM(e, (p, a)), and check whether its output is the Godel number of a valid 

prooftreeof ^PrT[^/’(a)](e*', |'<F], a) by using Uptm(wt, Oi where ^[e*'] = {^PrT[^/’(a)](e*', ['?'],a) | 
a £ N}. 

— If it is not a valid proof tree, then output 0. 

— If it is a valid proof tree (say 0), using proofs, 9 and tt, construct the following proof tree of 

Pe',r(a): 

< Pe',T (a), Modus Ponens > [9, <-iPrT[i/)(a)](e*', [iF], a) ^ pe',T(a), Modus Ponens > 
[7r,Vx (-.PrT[^/’(x)](e*', |■^F],x) ^ pe',r(x) ) ^ (-.PrT[^/’(a)](e*', [iF],a) ^ pe',T(a) ) ] ]. 

Output the Godel number of the proof tree. 

The running time of UpTM(e', •) is that of UpTM(e, •) plus polynomial-time in |a|. 

Since we assume that Eq. (trci holds, UpTM(e', (p, #17', a)) outputs the Godel number of a valid 
proof tree of pe',T(a). Thus, 

3a: £ N PTMe'(x) Ft Pe'.T(x). 

This contradicts Theorem EOl Therefore, Eq. does not hold. That is, for any e £ N and 
any tF, there exists e* £ N such that for any a: £ N 

PTMe(x)#T -PrT[#(x)](e#[<Fl,x). 
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4 Polynomial-Time Decisions 


In order to prove the (resource bounded) unprovability of P^^NP, this section introduces our 
formalization of a decision made by a polynomial-time Turing machine (polynomial-time decision: 
PTD). 

4.1 Polynomial-Time Decisions 

This section introduces the formalization of a decision made by a polynomial-time Turing machine 
(polynomial-time decision: PTD). 

Let <!> = {v3(a) | a G N} be a set of an infinite number of formulas in PA. If UpTM(e, (d, a)) 

accepts and 01 ^ t/^(a) (i-e., is true in the standard model of natural numbers), we then denote 

PTMf(a) >(/?(a). 

(This can be interpreted as “UpTM(e, •) correctly accepts p{si)-) Here d denotes a natural number 
(e.g., I), which indicates UpTM(e, •) that the output target is a decision on the formula’s truth. In 
other words, 


PTMf(a) >(/?(a) 

UpTM(e, (d, a))accepts A 01 |= V3(a). 

If UpTM(e, (d, a)) rejects and 01 \= -'(/?(a) (i.e., (p{a) is false in the standard model of 

natural numbers), we then denote PTMf(a) > -'(/?(&)• (This can be interpreted as “UpTM(e, •) 
correctly rejects ¥’(a).) In other words, 

PTMf (a) 0-(/?(a) 

AA UpTM(e, (d, a))rejects A 01 ^-"^(a). 

Here note that PTMf (a) > -^(p{a.) is different from PTM^(a) > -i(/?(a), where f2 = {-ii^(a) | a G N}. 

3 

In addition, we use the notation PTMf (a) ^(p(a) if and only if -i( PTMf (a) > (p(a) ). 

® In the notation of polynomial-time proofs, 

PTMe(a) h y>(a), 

we omit $ = {^^(a) | a G N} in a place of PTMe(a) h (p{a) (e.g., the upper right position of PTMe), 
since <1> is uniquely determined by the object of the proof, y>(a). However, in polynomial-time decisions, 
we have two different types of decisions as follows, as described above: 

PTM?(a)>vj(a), 

PTMf(a)>^(a), 


where Q = {-':p(a) | a G N}. In the former notation, (p{a) is correctly accepted, while, in the latter 
notation, “'V5(a) is correctly rejected. Therefore, in the notation of polynomial-time decisions, 

PTM?(a)>(p(a), 

we cannot omit ^ in the upper right position of PTMe. 
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We now introduce a relaxed notion of PTMf (a) > (/j(a). We denote 

PTMf (a) (^(a) 


if and only if 

UpTM(e, (d, a))accepts A U(r!, (d, a))accepts. 

Lemma 22. Let <1> = {(/^(a) | a £ N} be a set of an infinite number of Ai-formulas in PA, and 
If represent a primitive recursive relation R$, where there exists a Turing machine such 

that, for every a £ N, 

a £ R<i, <tA V{v^, (d, a))accepts. 


Then, 

PTMf (a) ^(a) PTMf (a) > (^(a), 

and 

PTMf (a) ^ PTMf (a) > -^ip{a). 

Proof. Since R^ is a relation that formula (p represents, for every a £ N 

\J{Vip,{d,ffT’, a))accepts a G R.p => PAhi^(a), 

U(w<^, (d, a))rejects ^ a ^ R$ ^ PA I- 'p{a). 

Since fll is a model of PA, from the soundness of PA, for every a £ N 

U(w,^, (d, #<?, a))accepts =^> Ul |= (/3(a), 

U(r!,^, (d, #<?, a))rejects ffl |=-'(/3(a). 
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4.2 Formalization of Polynomial-Time Decisions 

A formula to represent the relation on polynomial-time decisions, 

PTMf (a) [> <p(a), is obtained, in a manner similar to that shown in Section Tid 01 

Let T> = {(/7(a) | a £ N} be a set of an infinite number of zii-formulas in PA. Let formula 


PTM-Acc(e, [d>],a) 


polynomial-time represent 

over natural numbers, (e, a). 

Let formula 

represent 


UpTM(e, (d, #<?, a))accepts 


Acc(e, rd>l,a) 

U(e, (d, #<?, a))accepts 


over natural numbers, (e, a). Here, if a = (oi,..., o/c), we then denote 


Acc(e, |'^],ai, ...,ak) 
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to represent 


U(e, (d, (oi,..., afe)))accepts. 

The method of constructing these formulas is the same as that described in Section Fi. 101 
We then define the following formulas: for all a G N, 

CA„[(^(a)](e, |■^],a) = PTM-Acc(e, ,a) A Acc(v, ,a), 

CR„[:^(a)](e, 1"^], a) = -iPTM-Acc(e, , a) A ^Acc(v, , a), 

CD„[(/3(a)](e, |■^>],a) = CA„[(/3(a)](e, [d*], a) V CR«[(/?(a)](e, [d>], a), 

(Here, CA, CR, and CD stand for ‘correctly accept’, ‘correctly reject’, and ‘correctly decide’, 
respectively.) 

We also define the following formulas: for all a G N, 

CA[:/j(a)](e, a) = PTM-Acc(e, [<?], a) A 

CR[y?(a)](e, 1"^], a) = -iPTM-Acc(e, , a) A 

CD[(/j(a)](e, |■d>],a) = CA[(/3(a)](e, [d*], a) V CR[(/7(a)](e, [d*], a). 

Lemma 23. Let 17 = {w(a) | a G N} be a set of an infinite number of A^-formulas in PA. 

Then, there exists a primitive recursive function f such that 

3?/</(#17, Sizef 2 (a)) Uptm(?^pa, (#w (a), y)) accepts AA PAG a;(a), and 
3-z </(#17, Sizej 7 (a)) Uptm(wpa, (#“'w(a), z))accepts AA PAG -ita(a). 

Proof. Since a;(a) is a Zii-formula, there exists a TM U(eo, •) such that 

Va G N ( PA G uj(a) TM^(a) Gpa w(a) V PA G -iw(a) TAI^ (a) Gpa “'aj(a) ), 

where 17' = {-ia;(a) | a G N}, and Sizef 2 (a) = Sizef 2 '(a) for all a G N. 

Therefore, there exists another TM U(ei, •) such that 

VaGN U(ei,(#17,a)) = k| A ( U(eo, (p, #17, a)) = #^ v U(eo, (p, #17', a)) = #7r. 

(That is, TT is a proof tree of w(a) or -'aj(a), generated by U(eo, •)•) 

Hence, there exists a TM U(e 2 , •) such that 

U(e 2 , (#17,n)) =max{ |7r(a)| | 

oGN a n = Sizen(a) A (U(eo, (p, #17, a)) = #7r V U(eo, (p, #17', a)) = #7r ) }. 

(That is, U(e 2 , (#17, n)) computes the maximum length of proofs that U(eo, •) outputs where the 
input size is n.) 

Thus, there exists the above-mentioned primitive recursive function / that is computed by TM 
U(e 2 ,-). 

H 

Definition 24. Let 17 = {w(a) | a G N} and <P = {v?(a) | a G N} be sets of an infinite number of 
Ai-formulas in PA. 

Let \J{vq, •) be a TM as follows: 
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(Input: ) {d, ((<!>, a) 

(Output: ) accept or reject 

Let <I>i = I a G N} and <1>2 = {‘^ 2 (a) I o, £ N}. If (p{a) = </Ji(a) A 'P 2 {^), then 

let <P = {i^i(a) A (/92(a) I a G N^}; where Size4)(a) = Size4,j(a) + Size^)2(a). Then, simulate 
(d,((<Ti,a)) and\]{vQ, {d,f(‘I> 2 ,a)). (Here, whether (p(a) is the form of (pi{a) A (/92(a) 
is syntactically checked hy some rule, and is uniquely decided. For example, search a formula 
from left to right and syntactically check the form based on the leftmost A, and if it is not the 
form then move to the right direction to find another A, etc.) 

Accept if and only if both of them accept. 

If theorem in PA, 

PA G Vx( V^(x) ^ (/9(x) ), 

is installed in U(wJ^,-), then simulate \J{vQ,{d,f(F,a)), where T = {'(/'(a) | a G N} and 
Size 4 >(a) = Sizei//(a) +c (c: eonstant). 

Accept if and only if\J{vQ, {d, (fP, a)) accepts. 

A finite number of the theorems explicitly shown in this paper are installed in \I{vq, •). 

Let F = {tp{a) \ a G N} be a set of an infinite number of Ai-formulas in PA. If <!> = 
{CAr2['0(a)](e, [if"],a) | a G N}, then simulate\i-pT:yi{e,{d,ffF,a)) and\]{vQ,{d,f(I/,a)). Here 
Sizes-(a) = 2 • Sizes/(a). 

Accept if and only if both of them accept. 

Unless the above-mentioned cases occur, check (hy exhaustive search for y < f(ff[2,Size^{a))) 
whether 

< fiff^, Sizes,(a)) Uptm(wpa, (#‘G(a), y))accepts, (17) 

where UpTM('ypA,-) is defined in Section 113 and f is a primitive recursive function defined 
in Lemm,a \T\ 

Accept if and only if Eq. holds. 

Let U(?;^, ■) be a TM as follows: 

(Input: ) {d, a) 

(Output: ) accept or reject 

Let <I>i = {(/9i(a) I a G N} and <I >2 = { 7 ’ 2 (a) | a G N}. If Lp{a) = (/9i(a) V (/ 92 (a), then 
let <P = { 1^1 (a) V (/ 92 (a) I a G N^}, where Sizes-(a) = Sizes>i(a) + Sizes> 2 (a)- Then, simulate 
\J{vQ,{d,)(I>i,a)) and\J{vQ,{d,f(<I> 2 ,a)). (Here, whether ip {a) is the form of (pi{a) V (p 2 {a) is 
syntactically checked by some rule, and is uniquely decided.) 

Reject if and only if both of them reject. 

If theorem in PA, 

PA h Vx( “''g(x) ), 

is installed in U(t!^,-), then simulate \J{vQ,id,f('F,a)), where T = {tp{a) | a G N} and 
Sizes>(a) = Sizes/(a) +c (c: constant). 

Reject if and only if\J{vQ, {d, ffT, a)) rejects. 

A finite number of the theorems explicitly shown in this paper are installed in U(z;^, •). 

Let F = {ipia) \ a G N} be a set of an infinite number of Ai-formulas in PA. If F = 
{-iCRj7['0(a)](e, [S'], a) | a G N}, then simulate UpTM(e, (d, a)) and 1 ](vq, id,f(F,a)). 

Here Sizes-(a) = 2 • Sizes/(a). 

Reject if and only if both of them reject‘. 
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— Unless the above-mentioned cases occur, check (by exhaustive search for y < f{fff2,Size^{a))) 
whether 

32/</(#^^, Sizeg>(a)) Uptm(vpa, (#-'</5(a), 2 /))accepis, (18) 

where Uptm(i'pa,’) is defined in Section Wh and f is a primitive recursive function defined 
in Lemma W^ 

Rejeet if and only if Eq. IflSl) holds. 

If U{vq, •) and •) are TMs defined in Definition!^ we simply denote by 

CAr 2 [(/j(a)](e, [<!>],a) = CA^a [vj(a)](e, ,a), 

CRf 2 [vj(a)](e, |■^>],a) = CRvR[(^(a)](e, [^>],a), 

CDr2[v3(a)](e, [</>], a) = CA^a [(p(a)](e, , a) V CR^a[< p(a)](e, , a), 

Definition 25. We say U(f, ■) “soundly accepts” if, for any <1> = {(/^(a) | a G N}, for all a G N, 

\J{v, {d,ff<P, a))accepts 01 ^ (/3(a). (19) 

We say U(ti, •) “soundly rejects” if, for any <P = {(/3(a) | a G N}, for any o G N, 

\]{v,{d,ff<l>, a))rejects 01 ^ ^(/ 3 (a). ( 20 ) 

The following lemma is obtained from Definitions \24\ and \2,‘A and Lem,ma Wf\ 

Lemma 26. Let\J{v^,-) soundly accept, and\]{v^,-) soundly reject. 

For all a G N, 

\J{v^,{d,ff<P, a))accepts ^ 01 ^ (/3(a). (21) 

\J{v§,{d,ff<P,a))rejects 01 |=-'(/3(o). (22) 

PAh Vx ( Acc(v^, |■^>], (x,x)) ^ Acc(v)^, [^>i],x) A Acc(v^, [^> 2 !,x), (23) 

where T> = {i/3i(a) A (/ 32 (a) | (a, a) G N^}. 

PAh Vx (-.Acc(vg, [^>'1. (x,x)) ^ -.Acc(vg, [<l>i],x) A ^Acc(v^, [^> 2 ], x), (24) 

where <P' = {(/ 3 i(a) V (/ 32 (a) | (a, a) G N^}. 

PAh Vx ( CAf2['0(x)](e, [!//],x) ^ Acc(v^, |■CVl[e, 12]],x) ), (25) 

where E = {'0(a) | a G N} is a set of an infinite number of Ai-formulas in PA, and CAle, ff\ = 
{CAf2[0(a)](e, |■!^■],a) I a G N}. 

PAh Vx ( CRr2['0(x)](e, x) ^ -.Acc(v^, |■C7^[e, 12]],x) ), (26) 

where C7^[e, 12] = {-'CRf2[0(a)](e, {'?'],a) | a G N}. 

Remark: If 

3a; G N 01 ]= -'(/3(x), 

then 

PAI/ Vx ( Acc(v^, ]■<?],x) ^ (/3(x) ), 

since if PA h Vx ( PrpA({i/a(x)]) ^ (/3(x) ), then 3x G N PA I -^PrpA({(/3(x)]), which implies 

PA h Con(PA) and contradicts the second Godel Incompleteness Theorem. 
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Lemma 27. Let <P = {</?(a) | a S N} be a set of an infinite number of Ai-formulas in PA. 
For all e G N, and for all a £ N, 

PTMf (a) ^(a) ^ PTMf (a) > (^(a), 

For all e £ N, and for all a £ N, 

PTMf (a) -(/7(a) PTMf (a) > -(/^(a). 

Proof. For all e £ N, aiai for all a £ N, 

PTMf (a) i^(a) UpTM(e, (d, a))accepts A U(z;^, (d, a))accepts. 

As shown in Eq. m, 


V{v^, (d, a))accepts AA fll ^ pia)- 


Hence, 


PTMf (a) i>j,| (/9(a) UpTM(e, (d, a))accepts A ^ (/9(a) 

PTMf (a) >(/9(a). 

Similarly, from Eq. we obtain that for all e £ N, and for all a £ N, 

PTMf (a) -(p(a) AA PTMf (a) > -^(a). 
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Lemma 28. Let 17 = {w(a) | a £ N} and L> = {(/9(a) j a £ N} fee sets of an infinite number of 
Ai-formulas in PA. 

Then for all e £ N, 

PAh Vx ( CAf 2 [(/j(x)](e, [d>],x) ^ CAg.[(/j(x)](e, [d>],x) ), 

PA A Vx ( CRf 2 [(/j(x)](e, |■d>],x) ^ CR<?,[(/9(x)](e, [d'],x) ). 

Proof. For all e £ N, 

PAh Vx ( CAj7[(/9(x)](e, |■^],x) 

w PTM-Acc(e, [^],x) A Acc(v)^, , x) 

^ PTM-Acc(e, [^],x) A Acc(v^, ,x) 
w CA<j,[(/9(a)](e, |■d>],a) ). 


For all e £ N, 


PAh Vx ( CRr2[(/9(x)](e, |■(?],x) 

w -iPTM-Acc(e, [^],x) A -Acc(v{^, ,x) 
^ -PTM-Acc(e, [^],x) A -Acc(v^, [<?],x) 
^ CR<?,[(/9(a)](e, |■d>],a) ). 
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5 Incompleteness Theorems of Polynomial-Time Decisions 

This section shows the polynomial-time decision version of the (second) Godel incompleteness 
theorem. First, we introduce the Godel sentences of polynomial-time decisions, and the first in¬ 
completeness theorems of polynomial-time decisions. We then present the second incompleteness 
theorem of polynomial-time decisions, based on the the first incompleteness theorems and the 
derivability conditions of polynomial-time decisions. 

5.1 Derivability Conditions of Polynomial-Time Decisions 

Lemma 29. (D.l-CA) Let = {v5(a) | a G N} be a set of an infinite number of Ai-formulas 
in PA. 

For any e G N, for any G N, and for any a G N 

PTMf(a)>„(^(a) ^ PA h CA4(^(a)](e, (<?], a). 

Proof. For all e G N, and for all a G N, 

PTMf(a) ifia) 

UpTM(e, (d, a))accepts A U(v, (d, a))accepts 
=> PAG PTM-Acc(e, [^"1, a) A Acc(v, [^],a) (from Ai-Completeness Theorem of PA) 
PAG CA„[i^(a)](e, [^),a). 

H 

Lemma 30. (D.l-CR) Let <P = {v?(a) | a G N} be a set of an infinite number of Ai-formulas 
in PA. 

For any e G N, for any G N, and for any a G N 

PTMf (a) -(/?(a) ^ PA G CR4¥’(a)](e, [d>], a). 

Proof. For all e G N, and for all a G N, 

PTMf(a) -(/?(a) 

AA UpTM(e, (d, a))rejects A \J{v,{d,ff<P,a))re]ects 

=> PAG -iPTM-Acc(e, [^"1, a) A ^Acc(v, , a) (from Ai-Completeness Theorem of PA) 
PAG CR^[v3(a)](e, [^],a). 


H 

Lemma 31. (D.2-CA) Let L2 = {w(a) | a G N}, ^ = {</?(&) | a G N}, W = {tpi^a) \ a G N}, and 
F = {(f{a) A'ip(a) \ (a, a) G be sets of an infinite number of Ai-formulas in PA. 

For all ei G N and for all 62 G N, there exists 63 G N such that 

PAG Vx ( CAf2[v3(x)](ei, |■^],x) A CAf 2 [V’(x)](e 2 , [!F], x) 

^ CAr2[(^(x) A V'(x)](e3, |■^],x) ). 

Proof. PTM UpTM(e 3 , •) is constructed by using two PTMs, UpTM(ei, (d, •)) and UpTM(e 2 , (d, ffF, •)) 

as follows: 
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1. (Input:) (d, #r, (x, a:)) G 

2. (Output: ) accept or reject 

3. Run the following computation 

UpTM(ei, (d, #<?, x)), 

UpTM(e 2 , (d, #•?■, x)). 

4. If both of them accept, then accept. Otherwise reject. 

From the construction of UpTM(e 3 , - ji clearly 

PAG Vx ( PTM-Acc(ei, [d>],x) A PTM-Acc(e 2 , ,x) ^ PTM-Acc(e 3 , [r],x) ). 

As shown in Eq. 113), 

PAG Vx ( Acc(v)|, [d>],x) A Acc(v(^, [!F],x) ^ Acc(v(^, [F],x) ). (27) 

Then, for all ei G N and for all 62 G N, there exists 63 G N such that 

PAG Vx ( CAf 2 [:/j(x)](ei, [^],x) A CAf 2 [V'(x)](e 2 , |"!F],x) 

^ ( PTM-Acc(ei, |■d>],x) A Acc(v)^, [‘I'],x) ) 

A ( PTM-Acc(e 2 , A Acc(v)^, r'Fl,x) ) 

^ ( PTM-Acc(ei, [d>],x) A PTM-Acc(e 2 , ,x) ) 

( Acc(v^, |■<?],x) A Acc(v^, |■^F],x) ) 

^ PTM-Acc(e 3 , |T],x) A Acc(v) 2 , r^],x) 

^ CAr 2 [(/ 5 (x) A V^(x)](e 3 , [r],x) ). 

H 

Lemma 32. (D.2-CR) Let 17 = {a;(a) | a G N}, <P = {(/^(a) | a G N}, 'L = {tp{a) \ a G N}, and 
r = {ip{a) A ^/'(a) I (a, a) G be sets of an infinite number of Ai-formulas in PA. 

For all ei G N and for all 62 G N, there exists 63 G N such that 

PAG Vx ( CR 32 [:/j(x)](ei, |■^],x) A CRr 2 [V'(x)](e 2 , |'<F],x) 

^ CRr2[v5(x) V ?/'(x)](e3, r6l],x) ). 

Proof. PTM UpTM(e 3 , •) is constructed by using two PTMs, UpTM(ei, (d, •)) and UpTM(e 2 , (d, #'F, •)) 

as follows: 

1. (Input:) (d, #0, (x, x)) G N^. 

2. (Output: ) accept or reject 

3. Run the following computation 

UpTM(ei, (d, #<?, x)), 

UpTM(e 2 , (d, #>F, x)). 

4. If both of them reject, then reject. Otherwise accept. 
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From the construction of UpTM(e 3 , •)) clearly 

PA(- Vx ( ^PTM-Acc(ei, A -PTM-Acc(e 2 , [if],x) ^ ^PTM-Acc(e 3 , [0],x) ). 

As shown in Eq. 

PAh Vx ( -.Acc(v^, [^>],x) A ^Acc(v^, [!F],x) ^ -.Acc(v^, [0], x) ). (28) 

Then, for all ei G N and for all 62 G N, there exists 63 G N such that 

PAh Vx ( CRr 2 [(^(x)](ei, [^],x) A CRj 7 [V’(x)](e 2 , [!F], x) 

^ (-iPTM-Acc(ei, ,x) A ^Acc(v^, , x) ) 

A ( -'PTM-Acc(e 2 , [iF], x) A ^Acc(v^, [iF], x) ) 

^ ( ^PTM-Acc(ei, [^>],x) A ^PTM-Acc(e 2 , r<F] , x) ) 

A ( -.Acc(v^, r<?l,x) A ^Acc(v^, riF],x) ) 

<-> ^PTM-Acc(e 3 , |'T],x) A -'Acc(v^, [T], x) 

^ CRr2[(^(x) A V'(x)](e3, |■^],x) ). 

H 

Corollary 33. Let 17 = {a;(a) | a G N}, = {</ 9 (a) | a G N}, and 'L = {'0(a) | a G N} be sets of 

an infinite number of Ai-formulas in PA. 

We assume that 

PA h Vx {(fifx.) 0(x)) 

is installed in V{vq, •). 

Then, for all ei G N there exists 62 G N such that 

PAh Vx ( CAf 2 [v 5 (x)](ei, |■<?],x) ^ CAj 7 [ 0 (x)](e 2 , rtF],x) ). 

Proof. PTM UpTM(e 2 , •) is constructed by using PTM UpTM(ei, (d, ffd>, •)) as follows: 

1. (Input: ) {d,ffT,x) 

2. (Output: ) accept or reject 

3. Run the following computation 

UpTM(ei, (d, ff<P, x)). 

4. Accept if and only UpTM(ei, (d, ff^,x)) accepts. 

From the construction of UpTM(e 2 , •)) clearly 

PAh Vx ( PTM-Acc(ei, [d>],x) ^ PTM-Acc(e 2 , [!F],x) ). 

Since PA h Vx (:^(x) —> 0(x)) is installed in U(z;J^, •), 

PA h Vx ( Acc(v)^, |■d>],x) ^ Acc(v)^, |■^F],x) ). 

Then, for all ei G N there exists 62 G N such that 

PAh Vx ( CAj 7 [(^(x)](ei, [i?],x) 

^ PTM-Acc(ei, [l^jjx) A Acc(v) 2 , , x) 

^ PTM-Acc(e 2 , [iF],x) A Acc(v)^, [iF],x) 
w CAr 2 [ 0 (x)](e 2 , riF],x) ). 
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Corollary 34. Let fl = {w(a) | a S N}, <L = {v?(a) | a G N}, and 'L = {ipia) | a G N} be sets of 
an infinite number of Ai-formulas in PA. 

We assume that 

PA h Vx (-i(/?(x) ^ -i'!/>(x)) 

is installed in •). 

Then, for all ei G N there exists 62 G N such that 

PAG Vx ( CRf2[v3(x)](ei, |■^],x) ^ CRf2[^/;(x)](e2, [>f'],x) ). 

Proof. PTM UpTM(e2, •) is constructed by using PTM UpTM(ei, (d, •)) as follows: 

1 . (Input: ) {d,ff'T,x) 

2 . (Output: ) accept or reject 

3 . Run the following computation 

UpTM(ei, (d, x)). 

4 . Reject if and only UpTM(ei, (d, a;)) rejects. 

From the construction of UpTM(e2, •)) clearly 

PAG Vx ( ^PTM-Acc(ei, [d>],x) ^ ^PTM-Acc(e2, r<F],x) ). 

Since PA G Vx (-"^(x) ^ -i'i/)(x)) is installed in U(u(|, •), 

PAG Vx ( -.Acc(v^, rd>l,x) ^ -.Acc(v^, ['F],x) ). 

Then, for all ei G N there exists 62 G N such that 

PAG Vx ( CRr2[(/?(x)](ei, |■^],x) 

^ -'PTM-Acc(ei, f^jjx) A ^Acc(v(2, , x) 

^ -'PTM-Acc(e2, [iF], x) A ^Acc(v(2, , x) 

^ CRr2[V’(x)](e2, ['F],x) ). 
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Lemma 35. (D.3-CA) Let fl = {w(a) | a G N} and <P = {(/^(a) | a G N} be sets of an infinite 
number of Ai-formulas in PA. Let CVl[e, 17] = {CAi 7 [(p(a)](e, [<?],a) | a G N}. 

For all Cl G N, there exists 62 G N such that 

PAG Vx ( CAf2[(^(x)](ei, |■^],x) ^ CAr2[CAf2[(p(x)](ei, , x)](e2, |"CVl[ei, f?]], x) ). 
Proof. PTM UpTM(e2, •) is constructed by using PTM UpTM(ei, (d, ff<P, •)) as follows: 

1. (Input:) (d, #Cvl[ei, 17], a;) G 

2 . (Output: ) accept or reject 

3 . Run the following computation 

UpTM(ei, (d, #<?, x)). 

4 . Accept if and only UpTM(ei, (d, a;)) accepts. 
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From the construction of UpTM(e2, •)> 

PAh Vx ( PTM-Acc(ei, ^ PTM-Acc(e 2 , rtf'],x) ). 

As shown in Eq. 

PAh Vx ( CAf2[vj(x)](ei, ^ Acc(v;;^, [Chl[ei, f?]], x) ). 

Then, 

PAh Vx ( CAr2[(/5(x)](ei, [^],x) 

^ PTM-Acc(ei, [^],x) A Acc(v^, ,x) 

^ PTM-Acc(ei, [^],x) A CAr 2 [(^(x)](ei, ,x) 

^ PTM-Acc(e 2 , [CAl[ei, f2]] , x) A Acc(vJ^, |'Chl[ei, t?]] , x) 

^ CAr 2 [CAn[v 3 (x)](ei, |■<?],x)](e2, rChl[ei,f?]],x) ). 

H 

Lemma 36 . (D. 3 -CR) Let fi = {w(a) | a £ N} and <P = {</5(a) | a £ N} be sets of an infinite 
number of Ai-formulas in PA. Let CTl[e, f2\ = {^CRf 2 [i^(a)](e, [??],a) | a £ N}. 

For all ei £ N, there exists 62 £ N such that 

PAh Vx ( CRr 2 [(^(x)](ei, |■^],x) ^ CRr 2 [-'CRr 2 [</j(x)](ei, |■^],x)](e 2 , |'C7^[el, f2]],x) ). 
Proof. PTM UpTM(e 2 , •) is constructed by using PTM UpTM(ei, (d, #^, •)) as follows: 

1. (Input:) (d, #C7^[ei, 17], a;) £ 

2. (Output: ) accept or reject 

3. Run the following computation 

UpTM(ei, (d, #<L,x)). 

4. Reject if and only UpTM(ei, (d, #<?,a;)) rejects. 

From the construction of UpTM(e2, •)> 

PAh Vx ( ^PTM-Acc(ei, [d>],x) ^ ^PTM-Acc(e 2 , r!F],x) ). 

As shown in Eq. 123 , 

PAh Vx ( CRf2[v5(x)](ei, |■d>],x) ^ -.Acc(v^, |■C7^[el, f7]],x) ). 

Then, 

PAh Vx ( CRn[(/5(x)](ei, |■^],x) 

-iPTM-Acc(ei, [^],x) A -'Acc(v^, I"??],x) 

^ -iPTM-Acc(ei, [^],x) A CRj 7 [(^(x)](ei, ,x) 

^ -iPTM-Acc(e 2 , [C7?.[ei, 17]],x) A ^Acc(v( 2 , [C7?.[ei, 17]],x) 

^ CRf2[-'CRr2[:/5(x)](ei, ]'^],x)](e2, ]'C 7 ^[el, I 7 ]],x) ). 

H 
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5.2 Godel Sentences of Polynomial-Time Decisions 

Lemma 37. For any e € N and for any z; G N, there exists a set of formulas, = {p^^(a) | a G 

N}, such that 

PAhVx (p^^(x) ^ ^CA^[p^„(x)](e, [g^],x) ). 

For all a: £ N, pf^{x) is called a “Godel sentence” with respect to CA. 

Proof. Let e £ N and a; £ N be given. 

Based on the recursion theorem (Proposition El j TM U(fc, •) is constructed as follows: 

1. (Input:) (d, #N^, (e, u, a;)) £ N®., 

2. (Output:) accept or reject 

3. First, read its own code, fc £ N. 

4. Construct a formula, 

Ptv (x) = Acc(k, , X, e, v), 

(i.e., p^„(x) represents the relation that Uptm(^, (d, #N^, (e, r:, a;))) accepts). Let = {p^„(a) | 
a £ N}.’ 

5. Execute PTM UptmCC) (d, #G^,x)) to decide the truth of formula p^„(x). 

6. Execute TM U(z), {d,ffQ^,x)) to decide the truth of formula p^^(x). 

7. Reject if and only if both of UpTM(e, (d, x)) and U(u, (d, x)) accepts. 

Here, note that when only x occurs free in formula p^„(x), is a finite number. For 

a £ N, Pe,vi^) is equivalent to Pe,v{^) = A x = a), and „(a)t = 0(|a|). 

Then, in a manner similar to Lemma IT^ we obtain 

Ve£NV'!;£N PA h Vx (/a^„(x) ^ -.CA„[p^„(x)](e, , x) ). 

H 

Lemma 38. For any e £ N and for any u £ N, there exists a set of formulas, = {pf^yia) \ a £ 

N}, such that 

PAhVx (pf^„(x) ^ CR4p^„(x)](e, [0^],x) ). 

For all X £ N, p^yfx) is called a “Godel sentence” with respect to GR. 

Proof. Let e £ N and x £ N be given. 

Based on the recursion theorem lProDOsition ll7ll . TM U(fc, •) is constructed as follows: 

1. (Input:) (d, #N^, (e, X, x)) £ N®., 

2. (Output:) accept or reject 

3. First, read its own code, fc £ N. 

4. Construct a formula, 

PeA^) = Acc(k, |■N^],x,e,v), 

(i.e.,pf„(x) represents the relation that Uptm(^, (d, #N^, (e, X, x))) accepts). Let = {pf*„(a) | 
a £ N}.’ 

5. Execute PTM UpTM(e, (d, #G^,x)) to decide on the truth of formula p^„(x). 

6. Execute TM U(x, (d, #5^, x)) to decide on the truth of formula p^„(x). 

7. Accept if and only if both of UpTM(e, (d, ffG^, x)) and U(x, (d, ffG^, x)) reject. 

Then, in a manner similar to Lemma ITRl we obtain 

Ve£NV'!;£N PA h Vx (p^„(x) ^ CR^[p^„(x)](e, , x) ). 

H 
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5.3 The First Incompleteness Theorems of Polynomial-Time Decisions 

Theorem 39. Let pf^y{a) be a Gddel sentence with respect to CA, where a G N. Let = {p^„(a) 
a S N}. Let U(z;, •) soundly accept (see Definition \25\) . 

For all e G N, and for all cc G N, 

PTMf"(x) p^,(x). 

Proof. Assume that there exist e G N, z; G N and x G N such that 

PTMf (x)>„ p^,(x). (29) 

From Lemma Ei 

PA h CAj, (x)] (e, [0'^], x). 

Since PA has model 91, 

91 h CA„[p^^(x)](e, [a"^],x). (30) 

On the other hand, from assumption of Eq. ®,u(x,(d, , x)) accepts. Since U(x, •) soundly 

accepts. 

Applying Lemma rTTI to the above equation, 

91 h -CA„[p^,(x)](e,ra^],x). 

This contradicts Eq. (13011 . Thus, for all e G N, and for all x G N, 

PTMf (x) p^„(x). 

H 


Theorem 40. Let (a) he a Gddel sentence with respect to GR, where a G N. Let = {p^„ (a) 
a G N}. Let U(z;, •) soundly reject (see Defi,nition \25\) . 

For all e G N, and for all x G N, 


PTMf (x) -p^„(x). 


Proof. Assume that there exist e G N, z; G N and x G N such that 

PTMf(x)>, -pf^Jx). (31) 

From Lemma l30l 

PAG CR„[pf^^(x)](e, [g'^],x). 

Since PA has model 91, 


01 N CR4pf^,(x)](e,ra'^],x). 


■Rn 


(32) 


On the other hand, from assumption of Eq. (mil U(z;, (d, x)) rejects. Since U(z;, •) soundly 

rejects. 


01 h ^Pe,vi^)- 
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Applying Lemma |2H1 to the above equation, 


or h (x)] (e, [ g^l , x). 

This contradicts Eq. (|22J)- Thus, for all e G N, and for all x G N, 

PTMf (x) 


H 

The following Corollaries are immediately obtained from Theorems Idbl and BUI since •) 

soundly accepts and U(x^, •) soundly rejects, as shown in Lemma 1^ 

Corollary 41. Let 17 = {w(a) | a G N}, be a set of an infinite number of Ai-formulas in PA. 
Let U(xo, •) be a TM as defined in Definition \24\ Let p^o(a) = a (a) be a Gddel sentence with 

respect to CA, where a G N. Let Qq = {p^ni^ | a G N}. 

For all e G N, and for all x G N, 

PTMf-(x) p^^(x). 

Corollary 42. Let 17 = {w(a) | a G N}, be a set of an infinite number of Ai-formulas in PA. 
Let U(w^, •) be a TM as defined in Definition \24\ Let p^j^(a) = be a Gddel sentence with 

respect to CR, where a G N. Let Qq = {p^ qIs) \ a G N}. 

For all e G N, and for all x G N, 


PTMf-(x) -P^r2(x). 


5.4 The Second Incompleteness Theorem of Polynomial-Time Decisions 

Lemma 43. For a G N, let p^q{sl) = p^^^(a) be a Gddel sentence with respect to GA, and 
P^oi^) = P^v^i^) ® Gddel sentence with respect to GR. (For the definition of Vq and Vq, see 

Definition \24\ ) 

Then, there exists a primitive recursive function h such that for any Ai-formula sets F = 
{^/’(a) I a G N} and 17 = {w(a) [ a G N}, and for any e G N, 


PAL Vx ( -.CAj7[V’(x)](h(e), [tl/],x) 


(33) 

and 

PAG Vx ( -.CRj7[r/’(x)](h(e), [!f-],x) 

-^PeM^) )• 

(34) 

In other words, for any e G N, there exists e* such that 



PAG Vx (-.CAf2[-!/^(x)](e*, |■|f],x) 

^ Ptoi^) )> 

(35) 

PAG Vx ( -.CRr2[-!/^(x)](e*, |■|f],x) ^ 


(36) 
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Proof. Let 


So = I a G N} 

be a set of Godel sentences with respect to CA, and 

So = {pf,o(.^) I a G N} 

be a set of Godel sentences with respect to GR. 

Let 


g^+^{CAo[ptome, ra^^l,a)|aeN}, 

g^++ = {^pf^nia) I a G N}, 

g^+++ = {p^j7(a) A -^Pe^nia) | a G N}, 

g^+ ^ {^GRr2[p«r?(a)](e, \g^^,a) | a G N}, 

g«++ = {-p«^(a) laGN}, 

gR+++ = {p«^(a) V -^Pe,oi^) I a G N}. 

For any e G N, there exist e’*' G N, G N and G N such that 

PAh Vx ( GAr 2 [p^^ 2 (x)](e, rai 7 l,x) 

^ CAf 2 [GAf 2 [p^j^(x)](e, [e],x)](e+, [^^+],x) (by Lemma ESI 
^ CAr 2 [-'p^^(x)](e+''‘, |'t/'^'''+],x) (by LemmaOHand GorollaryESl) 

^ CAn[p^f2(x)](e, [aj^],x) A CAnhp^f2(x)](e++, [g"^++],x) 

^ CAn[p^f 2 (x) A ^p;(^^(x)](e+++, |■e'^+++],x), (by Lemma EU (37) 

1 

PAL Vx ( CRr 2 [p^f 2 (x)](e, r0^1,x) 

^ GRf 2 [-'GRf 2 [pf^^(x)](e, |■t/],x)](e+, [0^+],x) (by Lemma EEJ 

^ GRn[-'p^j^(x)](e'*”*', ,x) (by Lemma EHl and Corollary 1^) 

^ CRfi (x)] (e, [ g^l, x) A CRfi (x)] (e++, [0®^++], x) 

^ C^o[Pe,oi^) V -p^^(x)](e+++, [g^^+++],x) ). (byLemmaES (38) 


For any formula set <F = {■!/; (a) | a G N}, 

PA L Vx ( pt^aix) A -^Pe,o{^) ^ V'(x) ), (39) 

PA L Vx ( ^( p^^ai^) V -p^j 7 (x) ) ^ ^?/'(x) )• (40) 

Hence by Corollaries M and El for any G N, there exists e* G N such that 

PAL Vx ( CAr 2 [p^^(x) A ^p^^(x)](e+++, [a"^+++],x) 

^ CAr2[V’(x)](eM'!F],x) ), (41) 

PAL Vx ( CRn[p^j^(x) A ^pf^^(x)](e+++, [^^+++],x) 

^ CRr2[V^(x)](e*,rtf^l,x) ). (42) 
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Therefore, for any e G N, there exists e* G N such that 


PAh Vx ( CAr 2 [p^^(x)](e, [aj^],x) 

^ CAf2[-!/^(x)](eM'if],x) ), 

(43) 

PAh Vx ( CRr 2 [pf^f 2 (x)](e, [a^],x) 

^ CRn[^/>(x)](eM'!f'],x) ). 

(44) 

That is, 



PAh Vx (-.GAr 2 [-!/^(x)](e*, |■|f],x) ^ 

^GAr,[p^^(x)](e, raj^l,x) ), 

(45) 

PAh Vx (-GRr 2 [V'(x)](e*,r!f^],x) ^ 

^CRn[plo{^)]{e,\g^lx) ). 

(46) 


In addition, from the property of Godel sentences (Lemmas 1^171 and 1^ . 

PAhVx (p^^^(x) ^ ^CAf 2 [p;;^^(x)](e, ), 

PAhVx i^Pe,aix.) ^ ^CRn[pf^f 2 (x)](e, ). 

Hence, 

PAhVx ( ^CAn[i/'(x)](e*, [!f'],x) ^ p^^(x) ), (47) 

PAhVx ( ^CRr 2 [V’(x)](e*, [tP'],x) ^ -^Pe,ai^) )■ (48) 

Since e* is computed from e in a manner similar to those used in the lemmas and corollaries 
in Section o there exists a primitive recursive function h such that for any formula sets W and 
17, and for any e G N, 

PA h Vx ( ^CAr 2 [?/’(x)](h(e), [tf'],x) ^ ptn{x.) ), 

PA h Vx ( ^CRn[i/^(x)](/i(e), [!f'],x) ^ ^pf^^(x) ). 

H 

Lemma 44. Let T be a eonsistent PT-extension of PA. Let assume that there exist e G N, e* G N, 
cc G N and a Ai-formula set 'P = \ « £ N} such that 

PTMe(x)hT -CD[V^(x)](e*,['fl,x). (49) 

Then, there exists a primitive recursive function s such that e = s(e) G N and 

fnhV’(x) PTMf^'"*'(x)>,A -CAi.[V^(x)](e*, ['fl,x), (50) 

e^[e*] 

fnh-V'(x) ^ PTMf''=*l(a:)>„H -CR^,[V>(x)](e^[^^l,x), (51) 

©•^ [e*] 

where 0^\e*] = {-'CAiz/['(/;(a)](e*, ['?'],a) | a G N}, and 0^[e*] = {CRi/[^(a)](e*, ['?'],a) | a G N}. 
Proof. PTM UpTM(e, •) is constructed using PTM UpTM(e, •) as follows: 

— (Input: ) (d,#0^[e*],a:) G or {d,ff0^[e*],x) G 

— (Output: ) accept or reject 

— Simulate UpTM(e, (p, ff<P[e*], x)), and check whether its output is the Godel number of a valid 
proof tree of -'CD['!/:(x)](e*, ['?'],x) by using Uptm('Ct, •)• 

— Let input be (d, ff0^[e*\,x). Then, accept if and only if it is a valid proof tree. 
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— Let input be {d, ^0^[e*] , x). Then, reject if and only if it is a valid proof tree. 

The running time of UpTM(e, •) is that of UpTM(e, •) plus polynomial-time in |a;|. From the 
construction of UpTM(e, ■), there exists a primitive recursive function s such that e = s(e). 

Since T is a consistent PT-extension of PA, if Eq. ( 1 ^ holds, 

Tlh -CD[V>(x)](e*,r^l,x). 


Then, 



04 

h 

^/>(x) 





04 

h 

'0(x) A -.CD[V'(x)](e*, [!F],x) 


<t4> 

04 

h 

^PTM-Acc(e*, \<F], 

x) A 

V'(x) 



04 

h 

^PTM-Acc(e*, [if], 

x) A 

04 h 

V'(x) 


04 

h 

^PTM-Acc(e*, [if], 

x) A 

PA h 

V'(x) 


04 

h 

^PTM-Acc(e*, [if], 

x) A 

Uptm('c.?, (d, #>F, x)) (soundly) accepts 


04 

h 

^PTM-Acc(e*, [if], 

x) A 

04 h 

Acc(v^, rtf'],x) 


04 

h 

^PTM-Acc(e*, [if], 

x) A 

Acc(v^, |■tf'],x) 


04 

h 

-.CAi,['(/'(x)](e*, [iF] 






04 

h 

^'0(x) 





04 

h 

-•'(/'(x) A -'CD['!/)(x)]( 

e* 

,m,x) 


04 

h 

PTM-Acc(e* 


A 

^V'(x) ) 

<t4> 

04 

h 

PTM-Acc(e* 


A 

04 1= “'V'(x) 

<t4> 

04 

h 

PTM-Acc(e* 


A 

PA h “''0(x) 

<t4> 

04 

h 

PTM-Acc(e* 

,m,x) 

A 

UpTM(^'^, (d, #‘Z', a;)) (soundly) rejects 

<t4- 

04 

h 

PTM-Acc(e* 


A 

04^ ^Acc(v^, |■^F],x) 

<t4- 

04 

h 

PTM-Acc(e* 

,m,x) 

A 

^Acc(v^, |■'F],x) 

<t4- 

04 

h 

^CR,z,[i/’(x)]( 

:e%r-^i,x). 



Therefore, if Eq. 14911 holds, 

^hV'(x) => T1 h ^CA^[V'(x)](eM'tF],x), 

m 1=-'V'(x) 04 1= ^CRa^[V'(x)](e*, |■!F],x). 

Since ^CAi/[?/;(x)](e*, [lf'],x) and -'CRa^[^/>(x)](e*, ['?'],x) are Z\i-formulas, 

04^^/>(x) ^ PAh ^CAa,[?/)(x)](e*, |■!F],x), 

04 \= -'V'(x) PA h ^CR,j,[V'(x)](e*, |’tf'],x). 

Then, from the definition of U{uQjg.j, •) and U(u 0 jg.j, •) (see Definition!^. U(nQjg,j, (d, #0^[e*], a;)) 
accepts if 04 and U{u 0 jg.j, (d, #0^[e*],x)) rejects if 04 (= -''0(x). 
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On the other hand, from the construction of UpTM(e, •)) if Eq. I0ni) holds, UpTM(e, (d, #0^[e*],x)) 
accepts, and UpTM(e, (d, a;)) rejects. Thus, 


in^^(x) ^ PTMf-CA^[^(x)](e*,r^^],x), 

inh-V'(x) ^ PTMf -CR^[^(x)](e*,rtf^l,x), 

[e* ] 


H 

Theorem 45. Let T be a consistent PT-extension of PA. For any set of Ai-formulas P = {'!/’(3-) I 
a e N}, 

VeeN 3e*eN Va: £ N PTMe(a;) -CD[V'(x)](e*, [ifl.x). 

Proof. We assume that 

there exist e £ N and a formula set such that 

Ve*£N3a;£N PTMe(a:) hr -CD[V'(x)](e*, [f'],x). (52) 

Then, from Lemma IHl we can construct UpTM(e, ■) using UpTM(e, •) such that e = s(e) and 
UpTM(e, •) satisfy Eqs. and m- 

Then, there exists a primitive recursive function t such that e' = t{e) £ N and PTM UpTM(e', •) 
is constructed using PTM UpTM{e, •) as follows: 

— (Input:) (d,#^l^^[^(^,)],a) £N3or(d,#6l|H[;,(eq],a) eN3where0|^[^(^,)] = (a) | 

a £ N} and = {pf>, 0 R[h{e')](^) | a £ N}. (For the definitions of 0^[] and see 

Lemma El) 

— (Output: ) accept or reject 

— First, read its own code, e' £ N via the recursion theorem i Proposition 1 1 711 . 

— If input is (d, #0eA[^(g/)], a), then simulate UpTM(e, (d, #0"^[d(e')], a)), and accept if and only 
if UpTM(e, (d, # 0 '^[/i(e')], a)) accepts. 

— If input is (d, , a), then simulate UpTM(e, (d, #0^[d(e')], a)), and reject if and only 

if UpTM(e, (d, # 0 ^[/i(e')], a)) rejects. 

The running time of UpTM(e', •) is that of UpTM(e, •) plus polynomial-time in |a|. 

By substituting 0[h{e')] for 17, in Eqs. and El, we obtain that for any formula set 
W = {V'(a) I a £ N} and for any e' £ N, 

PAh Vx ( ^CA 0 A[^(g,)][^/>(x)](d(e'), x) 

PAL Vx (-.CReH[h(e')][V'(x)](h(e'), r'f'l,x) 

For all e £ N and all a £ N, 

^ h V'(x) => /(#!f',Size,j,(a)) </(#0^[e],SizeeA[g](a)), 

“'V'(x) ^ /(#!?', Size,j/(a)) </(#0^[e],SizeeH[e](a)) 

(for the definition of function /, see Definition I24II . 


Pe',e^[h{e')\i'^) ), (53) 

^d^,eR[/i(e')](x) )• (54) 
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Therefore, 


or ^ ipi^) 

PAh Vx (-.CA,i,[V'(x)](/i(e'), |■^P'],x) ^ ^CA 0 A[h(e>)]blJ{^)]{H^'),\'^'^,^) ), (55) 

fn 1 = “'V'(x) => 

PAh Vx (-.CR^['0(x)](/i(e'), r'fl,x) ^ -.CR 0 R[^(e/)]['!/'(x)](/i(e'), r<Z'l,x) ). (56) 

Hence, if Eq. holds, then by applying Eqs. itSni) . l(ST]), lO, (l5Hl . (ISSll . and (ISSl . 

qt|= ^(x) ^ a)) accepts, 

^V'(x) ^ U(r;gH[^(^,)],(d,#aeii[,,(e/)], a)) rejects. 

On the other hand, if Eq. 1521) holds, from the construction of UpTM(e^ •) and UpTM(e, Oj 

UpTM(e', {d, #l?eA[^(e/)],a)) accepts, 

UpTM(e', {d, a)) rejects. 

Hence, if Eq. (EU holds, for a formula set If", 

fnh ^(x) ^ de'GN 3 xGN PTM^f(a:) 

OTh -^(x) ^ 3e'GN 3a;GN PTM^f(x) -P^.<^[Me')](x). 

This contradicts Corollaries 1411 and 1421 Therefore, Eq. 1521) does not hold for e* = h{e') = 
h{t{s{e))). That is, there exists a primitive recursive function g such that for any e G N, for any 
If", and for any x G N 

PTM,{x)Vt -CD[V^(x)](g(e),['fl,x), 

where g{e) = h{t{s{e))). 

3 

Corollary 46. Let T be a consistent PT-extension of PA. There exists a primitive recursive func¬ 
tion g such that for any set of Ai-formulas T = {^/'(a) | a G N}, 

^^^(x) ^ VeGN VxGN PTMe(x) -CA[V'(x)](g(e), [tp'],x), 

^ VcGN VxGN PTMe(x) -CR[i/'(x)](g(e), [tf^],x). 

6 Formalization of P^^NP and a Super-Polynomial-Time Lower Bound 

We now introduce the notations and definitions necessary to consider the Py^NP problem in this 
paper. We omit the fundamental concepts and definitions regarding P and NP (see [531 for them). 
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6.1 Pt^NP 


Definition 47. Let i? 3 SAT C N fee o relation such that x G i? 3 SAT if and only if there exists a 
satisfiable 3CNF formula ip and x = ffip. Let SAT(x) fee a formula in PAand SAT(x) represent 
relation i?3SAT in PA. (see Section \K^ for representability.) That is, for every a G N 

a G i? 3 SAT PA P SAT (a), 
a i?3SAT PA I—^SAT(a). 

Let SAT be a set of formulas in PA, {SAT(a) | a G N}, and co-SAT he a set of formulas in PA, 
{-'SAT(a) I a G N}. Let Size 5 AT(a) and Sizeco-<SAT(a) be |a|. Let T>S he SAT U co-SAT. 

Definition 48. Let theory T be a PT-extension of PA. For e G N, let UpTM(e, {d,ffSAT, •)), on 
input cc G N, output one bit decision, whether x G i?3SAT or x ^ Rssat; in other words, SAT(x) is 
true or false. 

We then define a formula that characterizes the fact that a PTM, UpTM(e, (•, •))! given x G N, 
can solve the problem of deciding the truth/falsity of formula SAT(x). 

Definition 49. Let theory T be a PT-extension of PA. 


DecSAT(e, x) 


denotes a Ai-formula in PA, which represents the following primitive recursive relation on (e,x) G 
such that 

UpTM(e, (d, #5PlT, x)) accepts o x G i? 3 SAT- 


More precisely, let 

DecSAT(e,x) = CD[SAT(x)](e, , x) 

(For the definition of this notation, see Section El- This primitive recursive relation on (e, x) 
means whether the decision (on x G Rssat) of PTM UpTM(e, (d, ffSAT, •)) is correct or not. 

We now introduce the Cook-Levin Theorem ESI, which characterizes the P vs NP problem by 
the satisfiability problem, 3SAT (an NP-complete problem). 


Proposition 50. (Cook-Levin Theorem) 


3e G N 3n G N Vx > n ( UpTM(e, (d, )fSAT,x)) accepts x G i?3SAT ) 


if and only if P = NP. 

Lemma 51. Let theory T be a consistent PT-extension of PA. 

Ve G N Vn G A^ 3x > n T h -iDecSAT(e, x), 

if and only if P^NP. 

Proof. From the representability theorem (Proposition EJ regarding formula 
DecSAT(e,x), the statement of this lemma is equivalent to 

3e G N 3n G A^ Vx > n T h DecSAT(e,x), 


if and only if P=NP. 

Thus, we obtain the statement of this lemma from the definitions of formula DecSAT(e, x), and 

Proposition [SOI 
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Lemma 52. Let theory T be a PT-extension of PA and uj-consistent. 


Ve S N Vn G TV T h 3x > n -iDecSAT(e, x), 

if and only if P^NP. 

Proof. 

(If:) 

When 

3a: G N T h -iDecSAT(e, x), 

the following holds 

T h 3x -iDecSAT(e, x). 

(Only if:) 

The following claim is obtained from w-consistency. 

Claim. Let theory T be a PT-extension of PA and w-consistent. 

3e G N 3n G A^ Va: > n TP DecSAT(e,x). 

=> 3eGN3nGiV Tl/3x>n -iDecSAT(e, x). 

From Definition ESI if P=NP, 

3e G N 3n G AT Vx > n TP DecSAT(e,x). 

We then have the following equation from the above-mentioned claim, 

3e G N 3n G AT T 1/ 3x > n -iDecSAT(e, x). 

Hence, if 

Ve G N Vn G AT T h 3x > n -iDecSAT(e, x), 

then PyT:NP. 

3 


Note: This lemma implies 


Ve G N Vn G AT T h 3x > n -iDecSAT(e, x) 
VeGNVnGAT3x>n TP -iDecSAT(e,x). 

Definition 53. Let P^NP be a formula (sentence) in PA such that 

Pf^NP = Ve Vn 3x > n -iDecSAT(e, x). 


Lemma 54. 

if and only if Pf^NP. 


inh p^NP, 
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Proof. 


P^NP 

<;=> Ve S N \/n € N 3x > n PA h -iDecSAT(e, x) (from Lemma |2J 
<^VeSNVnS-/V3a:>n 01|= -'DecSAT(e,x) (since -'DecSAT(e,x) is Ai-formula) 

^ m[= iVNP. 

H 

Lemma 55. Let theory T be a PT-extension of PA and ui-consistent. If 

TP P^NP, 

then P^NP. 

Proof. If 

T h Ve Vn 3x > n -iDecSAT(e, x), 

then 

Ve £ N Vn £ iV T h 3x > n -iDecSAT(e, x). 

We then obtain P^fNP by Lemma 

H 


6.2 Formalization of a Super-Polynomial-Time Lower Bound 

This section shows a formalization of a super-polynomial-time lower bound in PA in a manner 
similar to PyfNP. 

Definition 56. Let L be a language (a set of binary strings) in PSPACE. Let Rl C N 6e a relation 
such that X P Rl if and only if [a;] £ L. Let </5l(x) be a formula in PA and </9i(x) represent relation 
Rl in PA. (see Section \K^ for representability.) That is, for every a £ N 

a £ Rl PA h (^^(a), 
a ^ Rl PA I— <ipL{a.). 

Let L>l be a set of formulas in PA, {(/Ji(a) | a £ N}, and Size^j,^{a) be |a|. 

Definition 57. 

Ve £ N Vn £ N 3a; > n -!( UpTM(e, (d, #‘?l, a;)) accepts x € Rl ) 
if and only if L has a super-polynomial-time computational lower bound. 

Lemma 58. Let theory T be a consistent PT-extension of PA. 

Ve £ N Vn £ 3a; > n T h -'CD[(/JL(x)](e, 

if and only if L has a super-polynomial-time computational lower bound. 
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Proof. This is obtained from the representability theorem (Proposition[2J) regarding formula 
CD[(^i(x)](e, and the definition of this formula notation, CD (see Section . 


H 

The following lemmas can be proven in a manner similar to those used in Lemmas m and EH 
Lemma 59. Let theory T be a PT-extension o/PA and uj-consistent. 

Ve S N Vn S A' T h 3x > n -iCD[(/3j;,(x)](e, 
if and only if L has a super-polynomial-time computational lower bound. 

Lemma 60. Let theory T be a PT-extension of PA and uj-consistent. If 

T\- Ve Vn 3x > n -.CD[(/5L(x)](e, 
then L has a super-polynomial-time computational lower bound. 

7 Unprovability of P^^NP and Super-Polynomial-Time Lower Bounds 


This section shows that there exists no formal proof of P^^NP in T, if T is a consistent PT-extension 
of PA and PTM-w-consistent for A 2 . This result is based on the second incompleteness theorem 
of polynomial-time decisions, Theorem EHl 

7.1 PTM-u;-Consistency 

Definition 61. Formula </3(x) in PA is called Sf (i = 1,2 ,...) if there exists a formula in 
PA such that 

PA h Vx (y)(x) iffyl) ), 

tfix) = 3wi < Vw2 < ••• QiWi < '0o(x,wi,..., Wi), 

where Qi is V or 3, Wi,..., Wi) is a formula that represents a polynomial-time relation over 

(x, wi,... ,Wi), Cj (0 < j < i) is a constant (in \x\). 

Similarly, formula <^(x) in PA is called Lif (1 = 1,2 ,...) if there exists a formula 
such that 

PA h Vx ((^(x) ■(-^ V'(x) )) 

t({x) = Vwi < 3 w2 < 2 !^!°'' ••• QiWi < 21’"!°' '0o(x,wi,..., w^). 

Formula (fifx.) in PA is called Af (1 = 1,2 ,...) if (^(x) is Sf and Ilf. 

Formula <p(x.) in PA is called QBF if there exists a formula V'(x) in PA such that 

PA h Vx ((/3(x) <-> ^^(x) ), 

tf{x)= Vwi < 3 w2 < 2 !^!°'' ••• QiWj < 21^1°*" V'o(x, wi,... ,Wfe), 

where k = \x(^ for a constant c. 
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Definition 62. (PT^yi-u-consistency) Let theory S he a PT-extension of theory T. S is PTM-w- 
inconsistent for Ai-formula ip(e*,x) over T, if the following two conditions hold simultaneously. 

Ve G N 3e* G N e N Vn > ^ Vc e N PTMe(n) \/t 3x (n < x < n + |n|‘=) (57) 

3e G N Ve* G N Vt' G N 3n > ^ PTMe(n) hg 3x > n (/ 3 (e*,x). (58) 

Here, Size^[c](n) = , and <P[c] = {3x (a < x < n + jnj^^) ip{e*,:x.) \ a G N}. 

Theory S is PTM-uj-consistent for (p{e*, x) over T, if theory S is not PTM-uj-inconsistent for 
(/3(e*,x) over T. 

Theory S is PTM-oj-consistent for Sf (Hf, Af, resp.) over T, if S is PTM-lu- consistent for 
any Sf (Uf, Af, resp.) formula ip{e*,x) over T. 

Theory T is PTM-co-consistent for ip(e*,x) (Sf, Hf, Af, resp.), if T is PTM-uj-consistent 
forip{e*,x) (Ef, TJf, Z\f, resp.) overT. 

The following definition is equivalent to the above: Theory S is PTM-w-consistent for ip{e*,x) 
over T, if the following condition holds. 

Ve G N 3e* G N 3.^ G N WnP i Vc G N PTMe(n) \/t 3x (n < x < n + |n|'^) (/3(e*, x) 

^ VeGN 3e* gN 3^GN Vn>^ PTMe(n) \/s 3x > n ip{e*,x). (59) 

fn the remarks below, we consider only the PTM-w-consistency of theory T, not the PTM-a>- 
consistency of theory S over T, since the PTM-w-consistency of S over T follows similarly in each 
remark. 

Remark 1 (Restriction of the related formulas of PTM-ii;-consistency) PTM-w-consistency 
is defined only for Ef, H^ or Af -formulas. This restriction is introduced from the fact that if 
(/ 3 (e*,x) has a bounded quantiher Qw < a with |a| = for a constant c, then no PTM can 
even read #a numeralwise. Since the notion of PTM-w-consistency is introduced to characterize a 
property of the provability of a PTM in theory T, such a restriction seems reasonable. 

Actually, the proof of P EXP may imply that PA or a PT-extension of PA is PTM-w- 
inconsistent for formula vj(e*,x) corresponding to the formulation of P EXP, which has a 
bounded quantiher with dw < a with |a| = for constant c. (In other words, the asymp¬ 
totic polynomial-time unprovability of P 7 ^ EXP does not imply the formal unprovability of P 7 ^ 
EXP.) 


Remark 2 (Inequivalence of PTM-w-consistency and w-consistency) PTM-w-consistency and 
w-consistency do not imply each other. 

First, we show that PTM-w-consistency does not imply w-consistency. If we assume that PTM- 
w-consistency of T for (/^(e*, x) implies w-consistency of T for ip{e*,x), PTM-w-consistency of T for 
ip{e* , x) implies consistency of T, since if T is inconsistent, T is w-inconsistent for (/^(e*, x). That is, 
the inconsistency of T implies PPyi-Lo-inconsistency of T for (^(e*,x). However, the inconsistency 
of T implies PPyi-LO-consistency of T for any formula, since if T is inconsistent, T can prove any 
sentence and Eq. does not hold, which implies that T cannot be PTM-w-inconsistent. This is 
contradiction. Therefore, PTM-w-consistency does not imply w-consistency. 

Next, we show that w-consistency does not imply PTM-w-consistency. Here, we assume that 

m \= P^NP. 
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It follows that theory T = PA + P^NP is w-consistent since PA is w-consistent, and clearly 


n- p^NP. 

We now assume that T is PTM-w-consistent for A 2 ■ Then, 

T \f PyfNP, 

by Theorem IH7I This is a contradiction. Therefore, T is PTM-w-inconsistent for while T is 
w-consistent, if |= PytNP. That is, w-consistency does not imply PTM-w-consistency, assuming 
that fd 1 = P^NP. 


Remark 3 (Relationship between PTM-w-consistency and w-consistency) Although PTM-w- 
consistency and w-consistency do not imply each other, as described above, the computational 
resource unbounded version of PTM-w-consistency for Z\i-formulas is equivalent to w-consistency 
for Z\i-formulas. 

Now we define a computational resource unbounded version of PTM-w-consistency, TM-tu- 
consistency, as follows: Theory T is TM-tu-inconsistent for 93 ( 0 *, x), if the following two conditions 
hold simultaneously. 

Ve £ N 3e* £ N £ N Vn > £ V/£ 7^ TMe(n) I/t 3x (n < x < n -I- /(|n|)) x),(60) 

3e £ N Ve* £ N V£ £ N 3n > £ TMe(n) Pt 3x > n i^(e*,x), (61) 

where 7?. is a set of primitive recursive functions. Here T is a consistent primitive recursive extension 
of PA. 

See Section rm for the definition of TMe(n) Pt ■ ■ and see Definition ESI for a generalized 
version of PTM-tu-consistency. 

Eq. (IHHll is equivalent to 

3e* £N 3££NVn>£ V/£7^ T ^ 3x (n < x < n + /(|n|)) (/^(e*, x), (62) 

since 

3e £ N Ve* £ N V£ £ N 3n > £ 3/£ 7?. TMe(n) Py 3x (n < x < n -t- /(|n|)) (/j(e*,x) 
O Ve* £N V££N3n>£3/£7^ T P 3x (n < x < n -£ /(|n|)) (p(e*, x). (63) 

(=J> is trivial, and <;= can be shown by constructing a TM that searches all proof trees, tt, of 
3x (n < X < n -I- /(|n|)) (/ 3 (e*,x) for all (e*,£, n,/) £ x 7^ in the order of the value of 

e* 3- £ 3- n -I- |#/| 3- |#7r| from 0 to greater. ) 

Eq. (liUTl is equivalent to 

Ve* £ N V£ £ N 3n > £ TP 3x > n (/j(e*, x). (64) 

Since :^(e*,x) is a Z\i-formula and T is a consistent extension of PA, Eq. II62II implies 

3e* £N 3££NVa:>£ TP (65) 

Hence, if T is TM-cij-inconsistent for Z\i-formula (^(e*, x), T is w-inconsistent for (/j(e*, x), since 
there exists (e*,n) £ such that 

Wx > n TP -'(/ 3 (e*,x) A 
TP 3x > n i^(e*, x) 
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from Eqs. (1^ and lIMI) . 

On the other hand, if T is ^-inconsistent for Z\i-formula T is TM-w-inconsistent for 

(p(e*,x) (= ip(x) for all e* G N), since 

Va; G N T h A T h 3x il){x) 

=> 3e* G N Vn > 0 V/ G 7^ T \/ 3x (n < x < n-I-/(|n|)) Lp{e*,x) 

A Ve* G N Vn G N (3n > n) TV- 3x > n if{e* ,x) 

Thus, TM-oj-consistency for Z\i-formulas is equivalent to w-consistency for Z\i-formulas. 


Remark 4 (Provability of PTM-w-consistency) Is PA (or another reasonable theory T) PTM-w- 
consistent for the related formula? Unfortunately, we have not proven the PTM-w-consistency of PA 
for A 2 ■ Moreover, as shown in TheoremC^l no PTM-w-consistent theory T, which is a consistent 
PT-extension of PA, can prove the PTM-w-consistency of PA, although PTM-w-consistency of PA 
for A 2 seems to be as natural as the w-consistency of PA. 


Remark 5 (Characterization of PTM-w-consistency through axioms and deduction) Assume 
that PA is PTM-w-consistent, and that T is a theory constructed by adding an axiom X to PA 
and is TTyi-uj-inconsistent. Then, 

3e G N Ve* G N V£ G N 3n > £ PTMe(n) hpA X 3x > n (/j(e*,x), ( 66 ) 

Ve G N 3e* G N 3£ G N Vn > £ Vc G N PTMe(n) I/pa 3x (n < x < n -t- |n/) (/j(e*, x).(67) 

We then assume that the deduction of Eq. is asymptotically polynomial-time, i.e., 

3e' G N Ve* G N V£ G N 3n > £ -^Qixi G N • ■ • -^QkXk G N 3a: > n 
PTMe'(xi,-",a;fc,a;) Ppa T(xi,---,Xfe) ^ v?(e*,x), ( 68 ) 

where X = Qixi • • • Qk^k Y (xi, ■ ■ ■ ,Xk), Qi (i = 1,..., fc) are quantifiers and Y (xi, ■ ■ ■ ,Xk) is a 
Ai formula. Here note that a polynomial (in the size of input) number of application of logical 
axioms. Modus Ponens and Generalization rules is an asymptotically polynomial-time deduction. 
We now assume that X can be asymptotically proven by a PTM over PA. Then, 

3e" G N Qixi G N- ■ -QfeXfc G N PTMe"(xi, • • • , 2 :^) PpA Y{xi,-■ ■ ,Xk). (69) 

From Eqs. (EHll and 1 M|), we obtain 

3eGN Ve*GN V£ G N 3n > £ 3x > n PTMe(x) Ppa ¥>(e*,x). 

Hence, 

3e G N Ve* G N V£ G N 3n > £ 3c G N PTMe(n) Ppa 3x (n < x < n -H |n|^) (f{e*,x), 

where 3x (n < x < n + |n/) (p{e*,x) = (p{e*,n), when c = 0 (i.e., 3c G N). This contradicts 
En. (l67|l . Therefore, if a theory T, which is PA -l-A, is PTM-ui-inconsistent, X cannot be asymptot¬ 
ically proven by any PTM, assuming that PA is PTM-w-consistent and the deduction of Eq. lIHHIl 
can be done asymptotically by a PTM. 

Here it is worth noting that any (true) axiom X can be asymptotically proven by a resource 
unbounded TM over PA. The point in this remark is that X cannot be asymptotically proven by 
any polynomial-time bounded TM (i.e., PTM) over PA. 
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Remark 6 (Generalization of PTM-w-consistency: C-w-consistency) 

We now generalize the concept of PTM-w-consistency to C-w-consistency, where C is a (uniform) 
computational class. 

Here, we introduce some concepts regarding C. Let Uc be a universal Turing machine specified 
to C in a manner similar to Uptm- Here we omit the precise definition of Uc, by which C is specified. 
Each Turing machine in C is specified by e G N as Uc(e, •). We now introduce the following notation: 

Ce(a) \-T <p(a) 

Uc(e, (p, #^,a)) = #7r A Uptm(wt, (#<p(a), #7r)) accepts. 

If the truth of AxiomT(n) (see Sectioncan be correctly decided by an algorithm of class 
C in |n|, on input n, we say that T is C-axiomizable. If T is an extension of Tq and C-axiomizable, 
then we say that T is a C-extension of Tq- 

Definition 63. (C-uj- consistency) 

Let theory S be a C-extension of theory T. S is C-uj- inconsistent for Ai-formula ip(e*,x) over 
T, if the following two conditions hold simultaneously. 

VeeN3e* eN3£GNVn>£V/eFc Ce(n) 3x (n < x < n +/(|n|)) p(e*,x), (70) 
3e G N Ve* G N V£ G N 3n > £ Ce{n) hg 3x > n (71) 

where Fq is a set of primitive recursive functions, f, such that Uc(e,a;) can do an existential search 
with /(|a:|) steps (e.g., decide 3y(x <y<x-\- /(|a:|)) g{y) = 0 by search of y for x, a; + 1,..., a; + 

fi\x\))- 

Theory S is C-uj-consistent for (p{e* ,x.) overT, if theory S is not C-uj-inconsistent for (p{e* ,x.) 
over T. 

Theory S is C-uj-consistent for Ef (Ilf, Af, resp.) over T, if S is C-uj-consistent for any Sf 
(nf, Af, resp.) formula (p{e* ,x.) overT. 

Theory T is C-uj-consistent for (p{e* ,x.) (Sf, Ilf, Af, resp.), if T is PTM-uj-consistent for 
(p(e*,x) (Ef, nf, Af, resp.) overT. 

The following definition is equivalent to the above: Theory S is C-cc-consistent for tp{e*,x.) over 
T, if the following condition holds. 

VeGN 3e*GN 3£ G N Vn > £ V/G Fc Ce{n) \/t 3x (n < x < n +/(|n|)) p(e*,x) 
^ VeGN 3e* gN 3^GN Vn>£ Ce(n) \/s 3x > n :p(e*,x). (72) 


7.2 Unprovability of Py^NP under PTM-w-Consistency 
Lemma 64. Let theory T be a consistent PT-extension of PA. Then, 

VeGN 3e* G N 3n G N \lx>n PTMe(x) I/t ^DecSAT(e*,x). 

Proof. Since 


DecSAT(e,x) = CD[SAT(x)](e, ,x) 

(see Section 1^ we obtain this theorem immediately from Theorem 1451 
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Lemma 65. Let theory T be a consistent PT-extension of PA. 

Let IJ[e*,c] = {3x (a < x < a + jal*^) -iDecSAT(e*,x) | a G N}, and Sizej;[e._c](a) = [a|°+^. 

Ve G N 3e* G N Vn G N Vc G N PTMe(n) I/t 3x (n < x < n + jnl^^) -'DecSAT(e*, x). 

Proof. Let f be a subset of N such that e G £ if and only if UpTM(e, •) is a PTM as follows: 

— Let (^(x) = SAT(x). Let = {(/?(a) | a G N}, and = {-i(/?(a) | a G N}. Let >P'[c] = {^(c, a, s) 
a G N A s < 2™°“^ }, where 

'if{c, a, s) = if {a, Bit(s, 0)) A if {a + 1, Bit(s, 1)) A • • • A if {a + |a|'^—1, Bit(s, jaj^^ —1)), 
V'(x, y) = (V3(x) A y = 0) V (-.(/?(x) A ^(y = 0)), 

Size<f(a) = Size 4 >'(a) = |a|, and Sizeii^[c](a) = 

— Syntactically check whether the input has the form of {d, (a, s)), then follow the speci¬ 

fication below. Otherwise, there is no particular specification on the input. 

— For alH = 0,1,..., — 1, simulate either one of UpTM(e, (d, ffd>,a + i)) and UpTM(e, {d, 

a + i)) by some rule (e.g., UpTM(e, (d, a + i)) is simulated if and only if a -I- i is even.) 

— UpTM(e, (d, a+i)) accepts (and UpTM(e, (d, a+i)) rejects) if and only if UpTM(e, (d, 

a -I- i)) rejects (and UpTM(e, (d, a + i)) accepts). 

— Accept (d, ff'Pic], {a, s)) if and only if 

Bit(s,i)=0 UpTM(e, (d, a-I-i)) accepts, 

for alH = 0,1 ,..., |a|° — 1. 

Note that £ can be primitive recursive by adopting a syntactically checkable canonical coding 
of the above-mentioned specification on Uptm- In other words, only e, for which PTM UpTM(e, •) 
is specified in the canonical coding, is in £. (Even if UpTM(e^•) has the same functionality as 
UpTM(e, •) with e G £, unless e' adopts the canonical coding, e' ^ £. 

Claim. For any c G N and for any e G £, 

PA h Vn Vs < 

( CA['!/:(c,n,s)](e, [!F[c]],n,s) ^ Vx (n < x < n|n|‘^) CD[(/?(x)](e, |■d>],x) ). (73) 

Proof. From the construction of UpTM(e, •) with e G £, for any constant c G N, 

PA h Vn Vs < 

( PTM-Acc[^/’(c, n, s)](e, [iFjc]], n, s) 

^ Vi < |n|^ (Bit(s, i) = 0 ^ PTM-Acc[(/?(n-|-i)](e, , n-|-i) ) ). (74) 

In addition, from the construction of UpTM(e, •) with e G £, 

PAL Vx ( PTM-Acc[v3(x)](e, [??],x) ) ^ -'PTM-Acc[(/?(x)](e, |'^'],x) ) ). (75) 

On the other hand, 

PA h Vn Vs < 2l"l°-^ 

{if{c,n,s) ^ Vi < Inj^^ (Bit(s, i) = 0 ^ i^(n-l-i))). (76) 
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By Eqs. 17411 . I75II and we obtain 


PA h 


Vn Vs < 

( CA['0(c,n,s)](e, , n, s) 

( PTM-Acc[^(c, n,s)](e, s) A -0(0,11,8)) 

^ Vi < |n0 ((Bit(s, i)=0 ^ PTM-Acc[v3(n + i)](e, n + i) ) 
A (Bit(s, i) = 0 ^ (^(n + i) ) ) 

^ Vi < |n0 ( (^(n + i) ^ PTM-Acc[</j(n + i)](e, n + i) ) 

Vx (n < X < n + |n0) CD[(/j(x)](e, [<?], x) ) ). 


Therefore, for any c S N and for any e G £, 

PA h Vn Vs < 

(( 3x (n < X < n+Inl^^) ^CD[(^(x)](e, |■^>],x) ^ -.CA[0(c, n, s](e, , n, s) ). (77) 

We now assume that there exists e S N such that 

Ve* e N 3n e N 3c e N PTMe(n) hr 3x (n < x < n + jn]'^) ^DecSAT(e*, x). (78) 

In other words, we assume there exists e G N such that 

Ve* G N 3n S N 3c e N PTMe(n) hr 3x (n < x < n + |n|'^) -iCD[(/3(x)](e*, I"??],x) (79) 

Then we can construct UpTM(e', •) with e' G 5 by using UpTM(e, •) as follows: 

— (Input :) (p, #T[e*, c], (n, s)), where T[e*,c] = {-'CA[^(c, a, t)](e, |'tp'[c]], a, t) | (a,t) G A 
t < 

— (Output: ) Godel number of a proof tree of ^CA['0(c, n, s)](e, |'!f'[c]], n, s) or 0. 

— Run the following computation 

UpTM(e, {p, #S[e*, c],n)) = z, UpTM(^^T, (#?7: 

where ?7 = 3x (n < x < n + jnl*^) -iCD[(^(x)](e*, |'<?],x). 

— Compute the proof (say 712 ) of 

Vy Vt < 2l"l°“^ ( 3x (y < X < y+lnl'^) ^CD[v3(x)](eM'^>],x) ^ -.CA[0(c,y,t)](eM'if'[c]],y,t) ), 

since there exists a proof of this formula by Eq. (EH) if e* G £■ (The computation time is finite.) 

— Check whether UpTM(i'r, (#?7)Z)) accepts or rejects. If it rejects, output 0 and halt. If it ac¬ 
cepts, then combine tti (z = #7ri) and 712 and make a new proof tree, tts, of ^CA['0(c, n, s)](e, |"'f'[c]], n, s), 
as follows: 

TTa = < ^CA['0(c,y,t)](e*, |’!f'[c]],y,t). Modus Ponens > 

[ TTi, < Formula A, Modus Ponens > [ 7r2, Axiom X ] ], 

where Formula A is 

3x (n < X < n + |n0) -'CD[(^(x)](e, f^jjx) ^ -iCA[^(c, n, s)](e, |'tp'[c]], n, s) 
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and Axiom X is a logical axiom, 

Vy Vt<2l"l°-i(3x(y <x<y+|n|'^) ^CD[(/j(x)](e*, [<?],x) 


iCA[-!/'(c, n, s)] (e* , |■^f'[c]] , n, s) ) 



— Output TTa for the proof tree of formula -iCA['i/;(c, n, s)](e*, , n, s). 

Therefore, if we assume Eq. there exists e' £ £ such that 
3n G N 3c e N Vs < Ve* e £ PTMe-(n,s) hr -CA[V'(c, n, s)](e*), [c]l, n, s). 


Then, since e' G £ implies g{e') G £, there exists e' G £ such that 

3nGN3cGNVs<2l”l°-i PTMe-(n,s) hr -CA[V’(c, n, s)](g(e'), [^"[ 0 ]!, n, s). 


Here, for any n G N, there exists s < 2l"l ^ such that 

Of 1= ip{c,n,s). 

Hence, there exist e' G N, n G N, c G N, s G N such that 


Tl 1= V^(c, n, s) A 

PTMe'(n,s) \-T -'CA[V'(c,n,s)]( 5 (e'), r>f'[c]],n,s). 


This contradicts Corollary^Hl so, Eq. m does not hold. 

Since the contradiction occurs when e* = g{e') with e' G £, we now define g* as follows: 



Since deciding whether e G £ or not is primitive recursive and the transformation of e to e' is also 
primitive recursive, function g* is primitive recursive. Then, 


Ve G N Vn G N Vc G N PTMe(n) I/t 3x (n < x < n + |n|‘^) -'DecSAT(g*(e), x). 
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Lemma 66. Let theory T be a consistent PT-extension of PA and PTM-oj-consistent for Af. 


Then 


Ve G N 3e* G N 3£ G N \/n>i PTMe(n) I/t 3x > n -iDecSAT(e*, x). 

Proof. Erom Lemma IHHl 

VeGN 3e*GN Vn > 0 Vc G N PTMe(n) /t 3x (n < x < n + ^DecSAT(e*, x). 

Since SAT(x) G Sf and ^SAT(x) G Lff, then -iDecSAT(e*,x) G Xf” and -iDecSAT(e*,x) G 
n^. That is, -DecSAT(e*,x) G . 

Therefore, if T is PTM-w-consistent for Af, T is PTM-w-consistent for -iDecSAT(e*, x) G A^^. 
We then obtain, from the definition of PTM-w-consistency, 

Ve G N 3e* G N 3£ G N \/n>£ PTMe(n) /t 3x > n -iDecSAT(e*,x). 
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Theorem 67. Let theory T he a consistent PT-extension of PA and PTM-uj-consistent for Z\|’. 


T\/ P NP. 

Namely, there exists no proof 0 / P 7 ^ NP in T. 

Proof. Assume that 

Th P 7 ^ NP, 

i.e., 

Th Ve* Vn 3x > n ^DecSAT(e*,x). (80) 

We can then construct PTM UpTM(e, ■) as follows: 

— (Input: ) {p,ffN[e*],n) G N^, where S[e*] = {3x > a -'DecSAT(e*, x) | a G N}. 

— (Output: ) Godel number of a proof tree of 3x > n -iDecSAT(e*, x). 

— Find a proof, tt, of formula Vy Vz 3x > z ^DecSAT(y, x), where tt exists according to the 
assumption, Eq. Here, the size of tt is constant in \n\. 

— Construct the following proof tree of 3x > n ^DecSAT(e*, x): 

< 3x > n -iDecSAT(e*,x),Modus Ponens > [ tt. Axiom X], 
where Axiom X is a logical axiom, 

Vy Vz ( 3x > z -iDecSAT(y,x) ) —> ( 3x > n ^DecSAT(e*,x) ) 

— Output the Godel number of the proof tree. 

Clearly, PTM UpTM(e, •) outputs a correct value for all (e*,n) G N*. Therefore, we obtain 
3e G N Ve* G N Vn G N PTMe(n) Ft 3x > n ^DecSAT(e*, x). 

This contradicts Lemma Eni Thus, 


T\/ P 7 ^ NP. 


3 

Remark: TheoremEZIand its generalization imply the results by Baker, Gill and Solovay ^ and 
by Hartmanis and Hopcroft naia. 

First, let assume the following proposition, which is a generalization of Theorem l67l and will be 
formally given in Part 2 of this paper. 

Proposition 68. Let C he a (uniform) computational class (see Remark^ of Definition s^} . and 
theory T be a consistent C-extension of PA and C-uj- consistent for QBF. 

Then, T eannot prove any super-C-computational-lower bound. 
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We now assume that a relativizable proof of P 7 ^ NP exists for any oracle A and that it is 
formalized in PA (or more generally, a ^-consistent theory T). 

Then, for any oracle A 

PAh P^ ^ NP^. 

From Proposition EHl PA should be PTM'^ -uj-inconsistent for any oracle A. Hence, PA should be 
TM-w-inconsistent, which is equivalent to w-inconsistent (see RemarkOlof Definition ESI ■ That is, 
PA is not oj-consistent. This is a contradiction. Thus, there exists no relativizable proof of P 7 ^ NP 
in PA, which corresponds to the result by Baker, Gill and Solovay pp. 

Similarly, we can also obtain a result corresponding to that by Hartmanis and Hopcroft PITH 
as follows: 

First we assume that T is a ^-consistent theory. Then, we can construct TM M such that 

desNVe* eNV£GN3r^>£3/e7^ PTM^(“)(n) Ft 3x (n < x < n +/(|n|)) (p{e*,x) 
Ve* gN 3n>£ 3/G7^ T h 3x (n < x < n +/(|n|)) (/j(e*, x), (81) 

and 

3eGN Ve*GN V£ G N 3n>l Ft 3x > n (/?(e*,x) 

Ve* G N G N 3n > £ T F 3x > n (^(e*,x). (82) 

(For a method of constructing M, see the description just after Eq. Hfidll in RemarkElof Definition 

inn) 

We now assume that 

rp pL(M) ^ js^pL(M)^ 

From Proposition 1(181 T should be PTM-^^^^^ -uj-inconsistent. However, from the construction of 
TM M, PTM^(^) -uj-inconsistent is equivalent to uj-inconsistent^ since Eqs. HU and lIH^ hold. 
That is, T should be Lu-inconsistent. This is a contradiction. Thus, for any w-consistent theory T, 
there exists a TM M such that 

p 1^ Y>L{M) ^ jv^pL(M) 

which corresponds to the result by Hartmanis and Hopcroft nan. 


7.3 Unprovability of Super-Polynomial-Time Lower Bounds in PSPACE under 
PTM-w-Consistency 

We can obtain the following theorem in a manner similar to that used in Section 17.21 

Theorem 69. Let language L be in PSPACE. Let theory T be a consistent PT-extension of PA 
and PTM-oj-consistent for QBF. 

Tl/Ve Vn 3x > n -.CD[(/3L(x)](e, |■(?L],x), 

Namely, there exists no proof of any super-polynomial-time computational lower bound of L in 
T. 
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8 Unprovability of PTM-cu-Consistency 

This section shows that the independence of P vs NP from T by proving PTM-w-consistency 
of T for a Zil’-formula (i.e., through Theorem ItiTIl cannot be proven in theory S', where S is a 
consistent PT-extension of T and is PTM-w-consistent for Zif. This result is based on the second 
incompleteness theorem of polynomial-time proofs, Theorem l21l 

Let T be a consistent PT-extension of PA, and assume that P^^NP is true. Then, if T is proven 
to be PTM-w-consistent for -iDecSAT(e*,x), Theorem 1671 will imply that T is independent from 
Pt^NP. To prove the PTM-w-consistency of T for ^DecSAT(e*, x), it is sufficient to prove that 

VeeN 3e*GN e N Vn > £ PTMe(n) \/t 3x > n ^DecSAT(e*, x), (83) 

since it has been already proven that 

Ve G N 3e* eN 3£ G N Vn > £ Vc G N PTMe(n) \/t 3x (n < x < n -f |n|^) ^DecSAT(e*,x) 
by Lemma ESI 

This section shows that theory S cannot prove Eq. formally, if S' is a consistent PT- 
extension of T and PTM-w-consistent for A 2 over T. That is, the PTM-w-consistency of T for 
^DecSAT(e*, x) cannot be proven in S. In other words, the independence of P vs NP from T by 
proving the PTM-w-consistency of T cannot be proven in S. Here, the formal sentence of Eq. 
in PA is 

Ve 31 Vn > 1 ^PrT[3x > n -iDecSAT(h(e), x)](e, [^(e)], n), (84) 

where h is a primitive recursive function"'^, and ^(e) = {3x > a -iDecSAT(/i(e), x) | a G N}. 

This result is based on the incompleteness theorem of polynomial-time proofs, Theorem l21l To 
obtain this result, however, a slight modification is required for Theoremas follows: 

Lemma 70. Let theory T be a consistent PT-extension of PA, and >f'(e') = {'0(e',a) | a G N}. 

VeGN 3e'GN Va; G N PTMe{x) \/t -PrT[^/>(e',x)](e', riJ'(e')l,x). 

Proof. First, Eq. 11211 is obtained in the same manner as that of Theoreml21l 
We then obtain 

PAh VxVy ( pe.T(x) A ^pe.T(x) ^ ?/>(y,x) ), (85) 

in place of Eq. m- 

We then obtain the following claim (in a manner similar to Corolla, rv ll 411 : 

Claim. Let (L = {v 5 (a) | a G N} and <f'(e) = {'if{e,a) \ a G N}, where e G N. Suppose that T is a 
consistent PT-extension of PA. We assume 

Th VxVy ((p(x) ^ if(y,x)). 

Then, for all ei G N there exists 62 G N such that 

VeGN PAh Vx ( PrT[:/?(x)](ei, |■<?],x) ^ PrT[V'(e,x)](e 2 , (e)],x) ). ( 86 ) 

^ In Ea. l8;ill . there exists a primitive recursive function h such that e* = h{e) for all e G N: i.e., 

VeGN V£gN 3n>£ PTMe(n) I/t 3x > n -nDecSAT(h(e), x). 
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Proof. From the first derivability condition (D.l) of a traditional proof theory [2] and the assump¬ 
tion of this lemma, we obtain 

PAh PrT(rVxVy {(p{k) ^ ijj{y,x))']). 

Then, PTM UpTM(e 2 , •) is constructed by using PTM UpTM(ei, (p, •)) as follows: 

1. (Input :) (p,#<F(e),a;) 

2. (Output: ) Godel number of a proof tree of '(/'(e,x) or 0. 

3. Run the following computation 

UpTM(ei, (p, #^, x)) = z, Uptm(?^t, (#<p(x), z)). 

4. Compute the proof (say 7 r 2 ) of Vw Vy (p(w) ^ ^(y, w)), since there exists a proof for the 
predicate from the assumption. 

5. Check whether UpTM('yT, (#'P(x),z)) accepts or rejects. If it rejects, output 0 and halt. If it 
accepts, then combine tti {z = ffni) and 7 r 2 and make a new proof tree, tts, for '(/;(e,x), as 
follows: 

TTs = < x). Modus Ponens > [tti, < (p(x) —> ^/^(e, x). Modus Ponens > ['K 2 , Axiom X]], 

where Axiom X is a logical axiom, “ Vw Vy (p(w) ^ ip{y,w)) —> (p(x) —> 

6 . Output TTs for the proof tree of formula '0(e,x). 

The other part of the proof can be completed in an analogous manner to that in Lemma ) 131 
except for the constructions of functions h and g to meet the above-mentioned construction of 
UpTM(e 2 , •)) ill this proof. 

H 

Therefore, by setting e <— 62 in Eq. am . for all ei G N there exists 62 G N such that 

PAh Vx ( PrT[p(x)](ei, |■^],x) ^ PrT[iA(e 2 ,x)](e 2 , riF(e 2 )l,x) ). (87) 

Then, applying Eq. lIHHll to Eq. (HTTIl . we obtain that for any e+++ G N, there exists e' G N such 
that 

PAh Vx ( PrT[pe,r(x) A ^pe,T(x)](e+++, |■a+++],x) ^ PrT[^/’(e', x)](e', |■^F(e')l, x) ), ( 88 ) 

in place of Eq. Cl- 

Hence, we obtain: for any e G N, there exists e' G N such that 

PAh Vx (-.PrT[^/’(e',x)](e', |■!^'(e')l,x) ^ pe,T(x) ), (89) 

in place of Eq. m- 

The remaining part of the proof of this lemma is the same as that of Theorem 12II 


Lemma 71. Let theory T be a consistent PT-extension of PA. Let'P{e') = {3x > a ^DecSAT(/i(e'), x) | 
o G N} and h be a primitive recursive function. 

Ve G N 3e' G N 3m G N Wi > m Vc G N 

PTMe(^) \/t 3n (1 < n < l-h lll'^) ^Prrpx > n ^DecSAT(/i(e'),x)](e', [^(e')l,n). (90) 
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Proof. First, we show the following claim: 

Claim. Let 'P{d,c) = {Vn (a < n < a + jal*^) ■!/>(d, n) | a S N} and If'(ci) = {'0(d, a) [ a S N}, 
where ip{d, a) is any formula, c £ N and d £ N. Then, 

Ve £ N 3e £ N Vd £ N 

PAL Vm Vc ( Pr-r [Vn(m < n < m + |m|'^) '(/;(d, n)](e, [<F(d, c)], m) 

^ Vn (m < n < m + |m|'^) PrT['*/'(d, n)](e, |'<F(d)], n) ) (91) 

Proof. First, we construct TM U(e, •) using PTM UpTM(e, •) as follows: 

1. (Input :) {p,ff'I'{d),n) 

2. (Output: ) Godel number of a proof tree of ip{d, n) or nothing (does not halt). 

3. Let Mq{c) = min{TO £N|m<n<m + \mf} and Mq(c) = max{m £N|m<n<m + |to|°} 

4. Set c ^ 0 and m <— Mo{c). 

5. Run the following computation 

UpTM(e, (p, #'F(d, c), m) = z, UpTM(wr, (#p, z)), 
where p = Vx (m < x < m + |m|'^) ip{d, x) 

6 . Check whether UpTM(i'r, (#P, 2 )) accepts or rejects. If it accepts, go to [7| If it rejects, set 
m <— m + 1 and check whether m > Mi. If m < Mi, then go toEl Otherwise, set c <— c + I, 
compute Mo{c) and Mo(I), m ^ Mo(c), and go to[3 

7. . Make a new proof tree, tt 2 , for ^’(d, n), from proof tree tti (z = ffiri) for p, as follows: 

tt 2 = < 'f’{d, n). Modus Ponens > [tti. Axiom Y], 

where Axiom Y is a logical axiom, “ Vx (m < x < m + Iml*^) ip{d, x) ^ V’(d, n))”. 

Output tt 2 for the proof tree of formula ip{d, n). 

Here, if c is a constant in \n\, then TM U(e, •) should be PTM in \n\. 

Therefore, from the construction of V(e, •), we obtain 

Ve £ N 3e £ N Vd £ N 

PAL Vm Vc ( Pr 7 ’[Vn(m < n < m + jml^^) ^/^(d, n)](e, [!F(d, c)], m) 

^ Vn (m < n < m + jml^^) PrT[^/’(d, n)](e, |'<F(d)], n) ) 


We now assume that 

3e £ N Ve' £ N Vm £ N > m 3c £ N 

PTMe(£)FT 3n (1 < n < 1+lll'^) ^Prrpx > n ^DecSAT(d(e'), x)](e', [d>(e')l, n). 
Then, from Eq. Ell), 

3e £ N Ve' £ N Vm £ N 3£ > m 3c £ N 

PTMe(£) Ft -PrT[Vn(l < n < 1+|1|‘=)3 x > n ^DecSAT(/i(e'), x)](e', [d>(e', c)l, 1). 
This contradicts Lemma cni 
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We obtain the following lemma immediately from Lemma ITTl and the PTM-w-consistency of S. 

Lemma 72. Let theory T be a eonsistent PT-extension of PA, S be a eonsistent PT-extension of 
T, and S be PTM-uj-consistent for over T. Let <?(e) = {3x > a -iDecSAT(h(e), x) | a € N} 
and h be a primitive recursive function. 

Ve G N 3e' G N 3m G N 'il>m PTMe(f) I/s 3n > 1 -iPrT[3x > n -iDecSAT(/i(e'), x)](e', \(l>{e')~\,n). 

Theorem 73. Let theory T be a consistent PT-extension of PA, and S be a eonsistent PT- 
extension of T and PTM-uj-eonsistent for A 2 over T. 

S\f Ve 31 Vn>l ^Prrpx > n ^DecSAT(/i(e), x)](e, , n). 

Namely, the PTM-uj-consistency of T for -iDecSAT(e*, x), which is sufficient to prove T \f 
P ^ NP, cannot be proven in S (see Eqs. 1 ^) and 

Proof. Let assume that 


Then 


S \- Ve 31 Vn > 1 ^PrT[3x > n ^DecSAT(/i(e),x)](e, |’<?(e)], n). 


VeGN Sh 31 Vn>l ^Prrpx > n ^DecSAT(/i(e), x)](e, [(|>(e)l, n). 


This implies 

VeGN Sh VI 3n>l ^Prrpx > n ^DecSAT(/i(e), x)](e, [(|>(e)l, n). 
This means that there exists e* G N such that 


VeGN V^GN PTMe.(£) hs 3n > 1 ^Prypx > n ^DecSAT(/i(e),x)](e, [<l>(e)],n). 

This contradicts Lemma EH 
Thus, 

S \/ Ve 31 Vn > 1 -'Prj'[3x > n ^DecSAT(/i(e),x)](e, n). 

3 


9 Unprovability of the Security of Computational Cryptography 

This section will show that the security of any computational cryptographic scheme is unprovable in 
the standard notion of the modern cryptography, where an adversary is modeled to be a polynomial¬ 
time Turing machine. 

First we will introduce a very fundamental cryptographic problem, the intractability of totally 
inverting a one-way function by a deterministic PTM (polynomial-time Turing machine). Modern 
computational cryptography is based on the assumption of the existence of one-way functions 

® Although a one-way function is usually dehned against probabilistic PTMs, one-wayness against deter¬ 
ministic PTMs is more fundamental than that against probabilistic PTMs. For example, if a function is 
one-way against probabilistic PTMs, then the function will be also one-way against deterministic PTMs. 
That is, proving the one-wayness of a function against probabilistic PTMs always implies proving that 
against deterministic PTMs. However, the reverse is not always true. 
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In other words, to prove any level of security of such a computational cryptosystem implies proving 
the one-wayness (the intractability of total inversion by any deterministic PTM) of an underlying 
function. Therefore, if it is impossible to prove the one-wayness of any function, it will be also 
impossible to prove any level of security of any computational cryptographic scheme. 

This section will show that the intractability of totally inverting a function by a deterministic 
PTM is impossible to prove formally in the standard modern cryptographic setting. 

Definition 74. Let n G N, and fn '■ Ijn'L —> 'Ljn^'L be a function with parameter n and 

T = {/„ I n G N} he a set of functions, where c is a constant. 

T is called one-way if there is no (deterministic) PTM UpTM(e, •) such that for all x = 
{n,y,z) G N X Z/n'^Z x Ijn'L UpTM(e,a;) outputs w G LjnL if there exists w such that 
y = fn{w), and outputs nothing otherwise. Here Size(a;) = Size(n, j/, z) = \n\. 

Definition 75. Let T = {fn | n G N} 6 e a set of functions (see Definition \W- Let Inv be an 
inversion oracle (a deterministic algorithm or a table) such that Inv(n,y) outputs one of [w \ y = 
fniw)} if there exists w such that y = fn{w), and outputs nothing otherwise. 

J- is called decisionally one-way if, for any inversion oracle Inv, there is no (deterministic) 

PTM UpTM(e,-) such that, for all x = {n,y, z) G N x Z/n'^Z x LjnL, UpTM(e,a;) accepts if 

and only ?/Inv(n,j/) > z. (Note that w is uniquely determined for each Inv and {n,y).) 

Lemma 76. J- is one-way if and only if J- is decisionally one-way. 

Proof. It is trivial that if a PTM can invert /„, it can also solve the corresponding decisional 
problem. 

On the other hand, we will show that if a PTM can solve the decisional problem of /„, then 
there exists a PTM that can invert /„. In other words, /„ can be completely inverted by using the 
solution of the decisional problem as a black-box \n\ times. Here, we use binary search. Given a 
problem (n, y) to invert fn, queries to UpTM(e, •) are (n, y, [n/2j), (n, y, [(3/4)nJ) (if the answer to 
the previous query is accept), .... Repeating this binary search \n\ times yields an integer v G 'LjnL. 
Then, check whether y = fn{v) holds or not. If it holds, set w = v. Otherwise, set w to a null 
string (or decide that there exists no value of w G Zn such that y = fn{w)). 

Therefore, T is one-way if and only if no PTM can solve the corresponding decisional problem. 

H 

As shown in Lemma izni the one-wayness of function family IF can be characterized by the 
intractability of the decisional problem, which can be also characterized by a formula in theory T 
as shown below. 

Definition 77. Let Rjp'" C 6e a relation with respect to inversion oracle Inv such that 
{e,n,y,z) G if and only if{n,y,z) G N x Z/n°Z x Z/nZ, and Uptm {c, {n,y, z)) ac¬ 

cepts if and only ifliiY(n,y) > z. 

Lemma 78. If F is one-way, P^NP. 

Proof. F is one-way, if and only if, for any inversion oracle Inv, there is no (deterministic) PTM 
UpTM(e, •) such that, for all {n,y,z) G N x Z/n'^Z x Z/nZ, UpTM(e, (n, y, z)) accepts if and 
only if (e, n, y, z) G Rjp'". 

Language {(e, n, y, z) G RyP'’^} is clearly NP. Therefore, if P = NP, there is no one-way function 
family. 
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We then obtain the following lemma immediately from Lemma l78l and Theorem EZI 

Lemma 79. For any theory T which is a consistent PT-extension of PA and PTM-u!-consistent 
for A 2 , there exists no proof of the one-wayness of any function family in T. 

To study the (im)possibility of proving the one-wayness of a function family, T = {/„ | n G N}, 
we need to make a model of provers (and adversaries). We now present a reasonable model of 
provers. 

Definition 80. (Model of a prover in computational cryptography) 

A prover is a PTM, which, given the (finite size of) description of a cryptographic problem, 
outputs a proof of the problem in a theory T that is a constant PT-extension of PA and PTM-uj- 
consistent for A 2 ■ 

This model should be justified by the fact that an adversary is modeled to be a PTM in the 
definition of the one-wayness of a function family in the above definition, which is the standard 
setting in modern cryptography. In other words, the models of a prover and adversary should be 
equivalent, since both prover and adversary are theoretical models of our human being who analyzes 
the security of a one-way function family to prove the security or to break it. The key part of this 
model is that theory T available for a prover to prove the security should be PTM-w-consistent, 
since a prover is assumed to be a PTM. This is because PTM-uj-inconsistent theory may include 
an unreasonably strong axiom (e.g., P^^NP itself) that no PTM can prove asymptotically in PA. 
We now obtain the following theorem from Lemma Ci 

Theorem 81. Under the prover model of DeRnition \H(A there exists no proof of the one-wayness 
of any function family. 

Note that PTM is just a one possible model of the feasible computation for our human being. 
Even if in the future we have to change the feasible computation model of our human being, the 
impossibility result of Theorem l81 I remains unchanged, because the computational models of prover 
and adversary should be equivalent in any feasible computation model. We will show similar results 
in various computational classes in Part 2 of this paper. 

In addition, combining the result m with Theorem 1671 yields the following consequence: 

Theorem 82. Under the prover model of Dehnition AHfA there exists no proof of the existence of a 
(black-box) reduction from a one-way permutation to a secret key agreement. 

10 Proof Complexity 

In order to characterize the computational complexity to recognize the feasibility (triviality) of a 
theory to prove a statement, this section introduces a proof complexity. 

Definition 83. We say that the proof complexity of p is 0(C) if there exists a proof of cp in a 
theory T that is a consistent PT-extension of PA and C -lu- consistent for any class C that includes 
C. We say that the proof complexity of ip is [2(C) if there exists no proof of pi in any theory T that 
is a consistent PT-extension of PA and C-lv- consistent. 
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We now assume that PA is C-w-consistent for any computational class C, which includes a 
computational class with constant-time complexity, 0 ( 1 ). 

Then, we obtain the following result: 

— Let PylEXP be a sentence that formalizes the statement of P^^EXP in PA in a manner similar 
to that in Sectional 

The proof complexity of PylEXP is 0(1) (i.e., a constant-time), since PylEXP can be proven 
in PA. 

— Let Con(PA) be a sentence that formalizes the consistency of PA in PA. In other words, 

Con(PA) = Vx ^PTM-Acpt(vpA, [T],x). 

(Eor the notation and related result, see Lemmas 0 and IHl) 

The proof complexity of Con(PA) is 0(P) (i.e., a polynomial-time), since Con(PA) cannot be 
proven in PA by the second Godel incompleteness theorem, but it has a polynomial-time proof 
over PA (LemmaEl), and there exists a PTM-w-consistent theory T (e.g., T = PA-I- Con(PA)) 
that proves Con(PA). 

— The proof complexity of P 7 ^ NP is 12(P) (i.e., super-polynomial-time), since P 7 ^ NP cannot 
be proven in a PTM-w-consistent theory iTheorem I67II . 

— The proof complexity of a (= Ve 31 Vn > 1 -iPrT[3x > n (^(x)](e, l"^],!!)) is 1?(P) (i.e., 
super-polynomial-time), from Theorem lTdl Therefore, the proof complexity of the independence 
of P vs NP from T by proving the PTM-w-consistency is also 1?(P). 

11 Informal Observations 

If we assume Hypotheses 1 and 2 in Section o our main theorem implies that P vs NP is 
independent from PA. As the next step, it is natural to try to prove Hypothesis 2 (PTM-w- 
consistency of PA). Since PA cannot prove Hypothesis 2, a theory T to prove Hypothesis 2 should 
include an axiom. A, outside PA. What axiom is appropriate for this purpose? 

Usually it is not so easy for mathematicians/logicians to select/determine an appropriate axiom 
that would be widely recognized as feasible. An extreme strategy is to adopt Hypothesis 2 itself as 
the new axiom, but such an axiom would not be accepted as feasible. Then, what is the criterion 
of a feasible axiom? Unfortunately we now have no candidate. Here we note that consistency 
and w-consistency are too weak as such a criterion since PA -|- Hypothesis 2 is w-consistent (i.e., 
consistent) if Hypothesis 2 is true. Currently, the feasibility of an axiom is decided only by whether 
it is widely accepted by many mathematicians/logicians to be feasible. 

Our result may suggest a criterion for the feasibility of an axiom/theory. 

Although axiom X is outside PA (i.e., PA cannot prove A), there exists an asymptotic proof 
of A over PA, if A is true. In other words, a Turing machine can produce an asymptotic proof 
of A over PA. We then consider the computational complexity of a Turing machine that can 
produce an asymptotic proof of A over PA. According to Theorem ESI theory T = PA -|- A to 
prove Hypothesis 2 should be PTM-oj-inconsistent, and Remark 0 of Definition 1621 shows that A 
cannot be asymptotically proven by any polynomial-time hounded TM (i.e., PTM) over PA, under 
some assumption. 

If the computational capability of human beings (along with our available/feasible computing 
facilities) is modeled as a polynomial-time Turing machine, which is widely accepted as a feasible 
computation model, our result implies that no human being can prove axiom A asymptotically over 
PA. This may imply that axiom A cannot be perceived as a feasible (or trivially true) statement 
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by human beings, since it is beyond our capability to prove (or recognize the truth of) it even 
asymptotically over PA. If so, a theory T in which Hypothesis 2 can be proven should include an 
axiom that cannot be perceived as feasible by human beings. That is. Hypothesis 2 cannot be proven 
in any feasible theory T, which is widely recognized to be feasible by mathematicians/logicians (i.e., 
human beings). In other words, even if Hypotheses 1 and 2 are true and P vs NP is independent 
from PA, such an independency cannot be proven (through proving Hypothesis 2) in any feasible 
theory T for us. Similarly, even if Hypothesis 1 is true, P^^NP may not be proven in any feasible 
theory for human beings. 

Con(PA), which is a formal sentence representing the consistency of PA in PA, is also unprovable 
in PA. That is, a theory T to prove Con(PA) should include an axiom, Y, outside PA. In contrast 
with the above-mentioned case of proving Hypothesis 2, Con(PA) can be asymptotically proven 
by a polynomial-time (more precisely, linear-time) Turing machine over PA (Lemma EJ, and can 
be proven in a PTM-tu-consistent theory, PA -|- Con(PA), if PA is PTM-w-consistent. Although 
Con(PA) would not be accepted as a feasible axiom, the fact that Con(PA) can be proven in a 
PTM-tu-consistent theory may imply the existence of a feasible axiom, Y, for us such that T = PA 
-I- Y can prove Con(PA) and T is PTM-w-consistent. Actually, Gentzen m proved Con(PA) in a 
feasible theory for us, which is in ZF (formal theory of set theory) and whose additional axiom, Y, 
to PA is regarding transfinite induction (corresponding to the axiom of foundation in ZF). 

The relationship between Godel’s incompleteness theorem and our result is similar to that be¬ 
tween recursion theory and computational complexity theory. Recursion theory studies (un)computability 
on Turing machines, which are widely accepted as the most general computation model (the 
Ghurch-Turing thesis), while computational complexity theory studies (un)computability on a 
much more restricted computation model, a feasible computation model for us (human beings), 
i.e., polynomial-time Turing machines (PTMs). The major difference in the computation model of 
recursion theory and the computational complexity theory is that the former is resource unbounded, 
while the latter is resource bounded (polynomial-time bounded). 

Godel’s incompleteness theorem is a result on unprovabilty in the most general formal theories, 
consistent theories (or slightly restricted theories, w-consistent theories), that include PA, while 
our main theorem is a result on unprovabilty in much more restricted formal theories, feasible 
formal theories for us (human beings), i.e., PTM-w-consistent theories, that include PA. The major 
difference in the formal theory of Godel’s incompleteness theorem and our main theorem is that the 
former considers only the feasibility of the theory for a resource unbounded machine (i.e., consistency 
or tu-consistency), while the latter considers the feasibility of the theory for a resource bounded 
(polynomial-time bounded) machine (i.e., PTM-tu-consistency). In fact, as shown in Remark El of 
Definition Ea the resource unbounded version of PTM-w-consistency is w-consistency. 

Here, it is worth noting that it should be controversial to decide the feasibility of a theory by 
PTM-w-consistency, where all axioms and deductions in a theory should be asymptotically proven 
by a PTM, but that it might be similar to the situation in computational complexity theory where 
it should have been controversial to characterize a feasible computation by class P, since class P 
clearly includes many infeasible computations for us such as computational complexity in 

input size n. 

Therefore, it may be reasonable to consider that class P is introduced to characterize an in¬ 
feasible computation, rather than to characterize a feasible computation. That is, we consider that 
a computation outside P is infeasible, or an infeasible computation is characterized as a super¬ 
polynomial-time computation class (super-P), since almost all computations in super-P are actu¬ 
ally infeasible except a very small fraction of super-P such as a computation with 0(n^°s*°s^°s"’) 
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complexity (In contrast, almost all computations in P are infeasible such that a computation with 

complexity is infeasible for c > 20, and only a small fraction of P is feasible). 

Similarly, it may be reasonable to consider that PTM-a;-mconszstenc7/, rather than PTM-w- 
consistency, is introduced to characterize infeasible theories. In fact, as we mentioned above, it is 
considered to be difficult for us (or PTMs) to perceive the feasibility (triviality) of an axiom of 
a PTM-uj-inconsistent theory, since an axiom of a PTM-uj- inconsistent theory cannot be proven 
even asymptotically by any PTM over PA, under some assumption (Remark O of Definition Ib2ll . 
Our main theorems imply that P^^NP (or any super-polynomial-time lower bound in PSPACE) is 
provable only in such an infeasible theory. 

Note that our results do not deny the possibility of proving P=NP in a feasible theory for us, 
if P=NP is true. 

Godel’s second incompleteness theorem has a positive significance in that it helps us to separate 
two distinct theories, T and S, because T h Con(S') implies that T ^ S (and T D S) since 
S \f Con(S') by Godel’s second incompleteness theorem. Using this idea, the results of this paper 
may provide some hint of the computational capability of human beings. 

Let M be a machine whose computational capability is unknown. If C is a computational 
class, our result helps us to characterize the computational power of M relative to C, because 
M Pt SuperLowerBound(C') where theory T is feasible for M implies that the computational 
power of M should be beyond C. Here SuperLowerBound(C) denotes a formula to represent the 
super-C computational lower bound in PA. If we assume M to be a computational model of human 
beings, then our obtained computational lower bound result of M Pt SuperLowerBound(C') in a 
feasible theory T for us implies the upper bound of our computational power. For example, we have 
already obtained a proof of a super-AC° lower bound |HI24j . This fact means that the computational 
power of human beings may exceed AG*^. 

This result may also give us some hint as to why all known results of computational lower bounds 
inside PSPACE are limited to very weak or restricted computational classes. If the computational 
capability of human beings is considered to far exceed the target computational class for lower 
bound proof (e.g., the target class is AC°), then it is likely that we may produce a proof of the 
lower bound statement in a feasible theory for us. However, if our computational capability is 
comparable to (or is not much beyond) the target computational class for lower bound proof, then 
it may be very unlikely that we can provide its proof in a feasible theory for us. In other words, 
the best result of computational lower bounds may suggest the computational capability of human 
beings. 

12 Concluding Remarks 

This paper introduced a new direction for studying computational complexity lower bounds; re¬ 
source bounded unprovability (Sections [21 and |31) and resource bounded undecidability (Sections 0 
andO. This approach can be generalized to various systems by generalizing verification machines, 
Uptm(^^T) •) in proof systems (Section|2I) and U(u, •) in decision systems (SectionQJ. 

As mentioned in Section CH the relationship between Godel’s incompleteness theorem and our 
result is similar to that between recursion theory and computational complexity theory. Recur¬ 
sion theory studies (un)computability on the most general computation model, Turing machines 
(TMs), while computational complexity theory studies (un)computability on a much more re¬ 
stricted computation model, a, feasible computation model for us, i.e., polynomial-time Turing ma¬ 
chines (PTMs), where PTMs are a resource (polynomial-time) bounded version of TMs. Godel’s 
incompleteness theorem is a result on unprovabilty in the most general formal theories, consistent 
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theories (or slightly restricted theories, w-consistent theories), that includes PA, while our main 
theorem is a result on unprovabilty in much more restricted formal theories, feasible theories for 
us, i.e., PTM-w-consistent theories, that includes PA, where PTM-w-consistent theories are a re¬ 
source (polynomial-time) bounded version of w-consistent theories. Note that a statement (e.g., 
Pt^NP ) unprovable in a PTM-w-consistent theory T is independent from T in our result, while a 
statement (e.g., Con(T) ) unprovable in an (w-)consistent theory T is dependent on T in Godel’s 
incompleteness theorem. 

In Part 2, we will extend these results to other computational classes and show that: for all 
t > 1, a super-7T/^ lower bound and a super-lower bound cannot be proven in a A/^-w-consistent 
theory and a Ilf -w-consistent theory, respectively. For alH > 1, a super-AC*“^ lower bound and a 
super-NC* lower bound cannot be proven in an AC*“^-w-consistent theory and an NC*-w-consistent 
theory, respectively. In addition, Part 2 will present similar results on probabilistic and quantum 
computational classes, since a probabilistic TM and quantum TM can be simulated by a classical 
deterministic TM; they can be formulated in PA in a manner similar to that in Part 1. Thus, for 
example, we will show that a super-BPP lower bound cannot be proven in a BPP-w-consistent 
theory and that a super-BQP lower bound cannot be proven in a BQP-w-consistent theory. 
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